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Abstract 

We give an algorithm tliat computes the genus two class polynomials of 
a primitive quartic CM field K, and we give a runtime bound and a proof 
of correctness of this algorithm. This is the first proof of correctness and 
the first runtime bound of any algorithm that computes these polynomials. 
Our algorithm uses complex analysis and runs in time 0(A^''^), where A 
is the discriminant of K. 



1 Introduction 

The Hubert class polynomial Hk £ of an imaginary quadratic num- 

ber field K has as roots the j'-invariants of complex elliptic curves having 
complex multiplication (CM) by the ring of integers of K. These roots 
generate the Hilbert class field of K, and Weber [35j computed Hk for 
many small K. The CM method uses the reduction of Hk modulo large 
primes p to construct elliptic curves over Fp with a prescribed number of 
points, for example for cryptography. The bit size of Hk grows exponen- 
tially with K, like 0(A), and so does the runtime of the algorithms that 
compute it. 

If we go from elliptic curves (genus 1) to genus 2 curves, we get the 
Igusa class polynomials HK,n £ {n ~ 1, 2, 3) of a quartic CM field K. 

Their roots are the Igusa invariants of all complex genus 2 curves hav- 
ing CM by the ring of integers of K. As in the case of genus 1, these 
roots generate class fields and the reduction modulo large primes p yields 
cryptographic curves of genus 2. Computing Igusa class polynomials is 
considerably more complicated, in part because of their denominators. 
Recently, various algorithms have been developed [71 IIUI I5T1 133) . but no 
runtime or precision bounds were available. 

This paper describes a complete and correct algorithm that com- 
putes Igusa class polynomials HK,n € oi quartic CM fields K = 
Q(\/Ao, y— a + by^o), where Ao is a real quadratic fundamental dis- 
criminant and a, 6 € Z are such that —a + b^/Ao is totally negative. The 
discriminant A of /S' is of the form A = AiAg for a positive integer Ai. 
We may and will assume < a < A, as Lemma 19.51 shows that each 
quartic CM field has such a representation. We disregard the degener- 
ate case of non-primitive quartic CM fields, i.e., those that can be given 
with fe = 0, as abelian varieties with CM by non-primitive quartic CM 
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fields are isogenous to products of CM elliptic curves, which are given 
already by the Hilbert class polynomial. We give the following runtime 
bound for our algorithm. 

Main Theorem. Algorithm \11.1\ computes Hk.ti (n = 1,2,3) for any 
primitive quartic CM field K in which 2 and 3 do not ramify. It has a 
runtime of 0{A1^^ Aq^^^) and the bit size of the output is O(AfAo). 

An essential part of the proof is the denominator bound, as provided 
by Goren and Lauter [15) and Goren |13l 114) . As these results assume 
ramification bounds on the primes 2 and 3, we have a similar restric- 
tion on K. This restriction will disappear as soon as Goren's results are 
extended to this case. 

Yang's [3S] denominator bounds are tighter than those of Goren and 
Lauter, but are proven only for a small class of CM fields. For that class of 
CM fields, we get an improvement from ©(A^^^A"''^) to ©(Af^^ A^^^) + 
0(Af/2Ag/2-) Theorem HEl 

We do not claim that our runtime is optimal, but an exponential run- 
time is unavoidable, because the degree of the Igusa class polynomials (as 
with Hilbert class polynomials) is already bounded from below by a power 
of the discriminant. 

Overview 

Section (21 provides a precise definition of the Igusa class polynomials that 
we will work with, and mentions other definitions occurring in the litera- 
ture. Our main theorem is valid for all types of Igusa class polynomials. 

Instead of enumerating curves, it is easier to enumerate their Jaco- 
bians, which are principally polarized abelian varieties. We provide the 
necessary theory in Section ]3] 

Van Wamelen [33j gave a method for enumerating all isomorphism 
classes of principally polarized abelian varieties with CM by a given order. 
We give an improvement of his results in Section jj] 

Section [5] shows how principally polarized abelian varieties give rise to 
points in the Siegel upper half space Ti.2 ■ Two such points correspond to 
isomorphic principally polarized abelian varieties if and only if they are 
in the same orbit under the action of the symplectic group Sp4(Z). 

In Section [6l we analyse the algorithm that replaces points in Ti.2 by 
Sp4(Z)-equivalent points in a fundamental domain T^- 

In Section [T] we give bounds on the entries of the matrices computed 
in Section [6| The theory of that section also allows us to generalize much- 
cited results from Spallek's thesis [31], and to give an interesting alterna- 
tive for the algorithms of Section [4| 

The absolute Igusa invariants can be computed from the matrices in 
the Siegel upper half space by means of theta constants. Section [S] intro- 
duces theta constants and gives a vast simplification of the formulas that 
express Igusa invariants in terms of theta constants, reducing the formulas 
from more than a full page to only a few lines. We then give bounds on 
the absolute values of theta constants and Igusa invariants in terms of the 
bounds from Section [7| We finish that section by showing how to evaluate 
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the theta constants, and hence the absolute Igusa invariants, to a given 
precision. 

Section [§] gives the bounds on the denominators of Igusa class poly- 
nomials. Section [To] shows how to reconstruct a rational polynomial from 
its complex roots, and the precision needed for that in terms of an upper 
bound on the denominator of the polynomial and the absolute values of 
the zeroes. 

Finally, Section [TT] puts all the results together into a single algorithm 
and a proof of the main theorem. 
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2 Igusa class polynomials 

The Hubert class polynomial of an imaginary quadratic number field K is 
the polynomial of which the roots in C are the j -invariants of the elliptic 
curves over C with complex multiplication by the ring of integers Ok of 
K. For a genus 2 curve, one needs three invariants, the absolute Igusa 
invariants ii,j2,*3, instead of one, to fix its isomorphism class. 

The following theory can be found in Igusa's paper [l^ . Let fc be a field 
of characteristic different from 2. Any curve of genus 2, i.e. a projective, 
geometrically irreducible algebraic curve of which the genus is 2, over k 
has an affine model of the form — f{x), where / G k[x] is a separable 
polynomial of degree 6. Let ai, . . . ,ae be the six distinct roots of / in k, 
and let ae be the leading coefficient. For a permutation a G Se, let (ij) 
denote the difference {aa-(i) ~<^tT(j))- We can then define the homogeneous 
Igusa-Clebsch invariants in compact notation that we explain below, as 

I, = a^^(12)^(34)^(56)^ 

15 

h = 4^(12)'(23)''(31)'(45)'(56)'(64)^ 

10 

/g = a^^(12)2(23)^(31)'(45)^(56)'(64)^(14)2(25)^(36)', 

60 

ho = "e" - Q!j)^- 

The sum is taken over all distinct expressions in the roots of /, that are 
obtained when a ranges over 5*6. The subscript indicates the number of 
expressions encountered. More precisely, there are 15 ways of partitioning 
the six roots of / into three subsets of two. Each yields a triple /i, /2, /s of 
monic quadratic polynomials over k, and the summand in is the product 
of their discriminants. Similarly, there are 10 ways of partitioning the six 
roots of / into two subsets of three, and each yields a summand in I^, 
which is the product of two cubic discriminants. For each of the 10 ways 
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of partitioning the six roots of / into two subsets of three, there are 6 ways 
of giving a bijection between those two subsets, and each gives a summand 
for Jg. Finally, /jq is simply the discriminant of /, which is non-zero as 
/ is separable. The above invariants were introduced by Igusa [T^, who 
called them A, B, C, D and based them on invariants of Clebsch [S]. 

By the symmetry in the definition, each of the homogeneous invariants 
is actually a polynomial in the coefficients of /, hence an element of k. 

We define the absolute Igusa invariants by 

i\ ~ lilfjlio I 

*2 = h^lho^ 
r5 r-2 

«3 = Uho ■ 

The values of the absolute Igusa invariants of a curve C depend only on 
the fc- isomorphism class of the curve C. For any triple (11,121*3)5 if 3 and 
13 are non-zero in k, then the converse also holds, that is, there exists a 
(unique up to isomorphism) curve C of genus 2 over k with iniC) — 
(n = 1,2,3) and this curve can be constructed using an algorithm of 
Mestre [26j . We show what to do if k has characteristic 2 or 3, or if 23 is 
zero, in Section [2. II 

Definition 2.1. Let K he & primitive quartic CM field. The Igusa class 
polynomials of K are the three polynomials 

HK,n^lliX -i4C)) GQ[X] (nG{l,2,3}), 

c 

where the product ranges over the isomorphism classes of genus 2 curves 
over C of which the Jacobian has complex multiplication (CM) by Ok- 

By the isomorphism class of C, we mean the isomorphism class of C 
as an algebraic curve over C. For definitions of the Jacobian and complex 
multiplication, see Section |3l We will see in Section |4] that the product 
in the definition is indeed finite. The polynomial is rational, because any 
conjugate of a CM curve has CM by the same order. 

2.1 Alternative definitions 

In the literature, one finds various sets of absolute Igusa invariants [H 1151 
\W[ [T71 [251 [55] . Most notably, Igusa defined homogeneous invariants J2n 
(n = 1, . . . , 5) in terms of a general hyperelliptic equation and used them 
to define absolute invariants that have good reduction behaviour at all 
primes, including 2 and 3. 

Another triple of invariants that seems standard [9l 1311 1331 I37j is 
Spallek's ji — /|/i^^,j2 ~ l2^4,Iw,js = I^^a^w ■ However, our choice of 
absolute invariants 11,12, is, yields Igusa class polynomials of much smaller 
height, both experimentally and in terms of the proven bounds of Corol- 
lary El] and Theorem US] See also Remark [Q 

If the base field k has characteristic 0, then Igusa's and Spallek's 
absolute invariants, as well as most of the other invariants in the lit- 
erature, lie in the Q-algebra A of homogeneous elements of degree of 
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Q[^2i ^41 -^61 Ao^]- Our main theorem remains true if (ii, 12, is) in the defini- 
tion of the Igusa class polynomials is replaced by any finite list of elements 
of A. 



Cardona-Quer invariants 

To deal with the case 13 = 0, we give one more alternative set of absolute 
invariants. This alternative set is analogous to the modifications that 
Cardona and Quer W make to Igusa's absolute invariants, hence we call 
them Cardona-Quer invariants. They are given by the same formula as 
before if 14 7^ and otherwise by 

r,- ,M - / (^'/eAV, 0) if 4 = and 7^ / 0; 

Cardona-Quer invariants have the advantage that they do give a bijection 
between and the set of isomorphism classes of genus 2 curves over fc, 
but the disadvantage that they are not elements of the function field of the 
moduli space of genus 2 curves (which the elements of the ring A above 
are). 

Our main theorem also holds if the absolute Igusa invariants in the 
definition of the Igusa class polynomials are replaced by Cardona-Quer 
invariants. 



Interpolation formulas 

If we take one root of each of the Igusa class polynomials, then we get a 
triple of invariants and thus (if iz 7^ 0) an isomorphism class of curve of 
genus 2. That way, the three Igusa class polynomials describe triples of 
invariants, where d is the degree of the polynomials. The d triples corre- 
sponding to CM curves are among them, but the Igusa class polynomials 
give no means of telling which they are. 

To solve this problem (and thus greatly reduce the number of curves 
to be checked during the CM method), Gaudry et al. [TT] introduced 
polynomials 

i?A',„ (in(C) n (^-»i(^')) GQm, (nG{2,3}). 

C \ C'^C ) 

If Hk,i has no roots of multiplicity greater than 1, then the triples of 
invariants corresponding to curves with CM by Ok are exactly the triples 
(ii, 12, 13) such that 

//A',i(ii) = 0, ^„ = |^^-M (nG{2,3}). 

Our main theorem is also valid if we replace Hk,2 and Hk,3 by Hk,2 
and Hk,3- 
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3 Jacobians 



Instead of enumerating CM curves, we enumerate their Jacobians, which 
are complex tori coming from lattices of a special form. 

Let C be a smooth projective irreducible algebraic curve over C. We 
give the definition of the Jacobian as in [5]. Let H'^{ujc) be the complex 
vector space of holomorphic 1-forms on C and denote its dual by //"(tjc)*- 
The genus g of C is the dimension of this vector space. This paper is 
about the case g = 2, but we treat the general case in this section as 
it is not harder. The homology group Hi{C,7i) is a free abelian group 
of rank 2g and we get a canonical injection Hi{C,Z) — > H^Iluc)*, given 
by 7 I— i- (lj J^Lj), where the integral is taken over any representative 

cycle of the class 7 G Hi{C,Z). The image of Hi{C,Z) in H°{ljcT 
is a lattice of rank 2g in a g-dimensional complex vector space and the 
quotient J(C) = H^icjc)* /Hi{C,Z), which is a complex torus, is called 
the unpolarized Jacobian of C. 

The endomorphism ring End(C^/A) of a complex torus C®/A is the 
ring of C-linear automorphisms of that map A into itself. A CM field 
is a totally imaginary quadratic extension of a totally real number field. 
We say that a complex torus T of (complex) dimension g has complex 
multiplication or CM by an order O in a field K if K has degree 2g and 
there exists an embedding O End(r). We say that a curve C has CM 
if J(C) does. 

It turns out that J(C) is not just any complex torus, but that it 
comes with a natural principal polarization. A polarization of a complex 
torus C^/A is an alternating R-bilinear form E : x C® R such that 
£;(A, A) C Z and E(iu,iv) = E{u, v) for ah u,v G ^ Section 2.1]. The 
degree of a polarization is y/ det M, where M is a matrix that expresses E 
in terms of a Z-basis of A. We call a polarization principal if its degree is 1. 
If we denote by • the intersection pairing on H\{C, Z) extended R-linearly 
to H^lujc)*, then E : {u,v) t-^ —it ■ v defines a principal polarization on 
J{C). By the (polarized) Jacobian of C, we mean the torus together with 
this principal polarization. 

A torus for which there exists a polarization is called an abelian variety, 
and a torus together with a (principal) polarization, such as the Jacobian 
of a curve, is called a (principally) polarized abelian variety. 

We have now associated to every complex curve a principally polarized 
abelian variety. Next, we recall that this in fact gives a bijection between 
curves of genus 2 up to isomorphism and certain principally polarized 
abelian surfaces (dimension 2 abelian varieties) up to isomorphism. 

An isomorphism f : {C^/A,E) ^ {C^/A',E') of (principally) po- 
larized abelian varieties is a C-linear isomorphism / : C® such 
that /(A) = A' and f*E' = E, where f*E'(u,v) = E{f(u),f{v)) for 
aU u,v e Cf. 

Theorem 3.1 (Torelli). Two algebraic curves over C are isomorphic if 
and only if their Jacobians are isomorphic (as polarized abelian varieties). 

Proof This is Theorem 11.1.7 of [2]. □ 
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The product of two polarized abelian varieties (Ti,i?i) and (T2,i?2) 
has a natural polarization {v,w) i— > E-i{vi,wi) + E2{v2,'W2) called the 
product polarization. 

Theorem 3.2 (Weil). Any principally polarized abelian surface over C 
is either a product of elliptic curves with the product polarization or the 
Jacobian of a smooth projective curve of genus 2. 

Proof This is ^ Satz 2] or j2. Corollary 11.8.2]). See also Remark [8T0l 
below. □ 



4 Abelian varieties with CM 

In this section, we give an algorithm that computes a representative of 
every isomorphism class of complex principally polarized abelian varieties 
with CM by the ring of integers Ok of a primitive quartic CM field K. 
We give statements that hold for general CM fields where they are not 
harder. 

4.1 Ideals and polarizations 

Let K be any CM field of degree 2g, i.e., a totally imaginary quadratic 
extension of a totally real number field Kq of degree g. We assume that K 
does not contain a strict CM subfield. In the case g = 2, this assumption is 
equivalent to the assumption that K is primitive, i.e. does not contain an 
imaginary quadratic subfield. Recall that we say that an abelian variety 
A has CM by Ok if A has dimension g and there exists an embedding 
Ok End(A). 

A CM type $ of a CM field if is a set of g embeddings K ^ C such 
that <I> U $ is the complete set of 2g embeddings. By abuse of notation, 
we interpret "1> as a map $ : if ^ by writing $ — {(fii, . . . , (j)g} and 
setting $(a) = (01 (a), ... , (jig (a)) G for a & K. 

Let T>K/Q be the different of K. Suppose that $ is a CM type of K, 
that a is a fractional Oif-ideal, and that ^ € if is a generator of the Ok- 
ideal (qcTI^k/q)"^ such that (/)(^) lies on the positive imaginary axis for 
every e <I>. Then the map E : $(if ) x ^(if ) Q given by 

i5(<l>(a),$(/3)) = TrK/Qi^aP) for a,(3eK 

is integer valued on "l'(a) x <l?(a), and can be extended uniquely R-linearly 
to an R-bilinear form E : C x C ^ R. We denote the pair (C /$(a), E) 
by ^<i.,o.e- 

Theorem 4.1. Suppose that K is a CM field of degree 2g that does not 
contain a strict CM subfield. 

1. For any triple ("I>, a, f) as above, we have that Ai^,^.^ is a principally 
polarized abelian variety with CM by Ok. 

2. Every principally polarized abelian variety over C with CM by Ok 
is isomorphic to Ai>,a.^ for some triple (<&, o,^) as above. 
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3. For every pair of triples ($, a, ^) and ($', a' ,^') as above, the princi- 
pally polarized abelian varieties ^*,o,? o,nd Aj>/ are isomorphic 
if and only if there exist a £ Aut{K) and 7 G K* such that 

(a) = <& o cr , 

(b) aa' — "fa and 

(c) ai' = (77)-!^. 

Moreover, every abelian variety with CM by Ok is simple, i.e. not isoge- 
nous to a product of lower-dimensional abelian varieties. 

Proof. The fact that every abehan variety with CM by Ok is simple is 
[20I Theorem 1.3.1(iv) and Theorem 1.3.4]. 

Part [T] (resp. [2]) is a combination of the parts 1 (resp. 2) of Theorems 
1 and 3 of [33j (originally ^31, Satz 3.13 and Satz 3.14]). 

It remains to prove part |3l For any automorphism a of K, the princi- 
pally polarized abelian varieties 

^*,o,e and A^,otT,^-'^a.a-^i 

are equal by definition. Conversely, we claim that if ($, a, ^) and ($', a', 1^') 
are isomorphic, then there exists an automorphism a oi K such that 

$' = $ O (T. 

Proof of the claim: suppose that A*,o,? and A^i y^^^i are isomorphic 
via an isomorphism / : C^/$(a) ^ C^/$'(a'). Then / induces the iso- 
morphism 

m : End(C''/$'(o')) ^ End(C''/$(a)), given by I ^ f'^lf. 

The action of Ok on a induces the embedding 

i.^:K^ End(C7$(a)) ® Q, 

which maps a G K to the diagonal matrix diag"J'(Q) with entries (j){a) 
for (j) £ ^. This embedding is an isomorphism by |33l Theorem 1.3]. We 
also have the analogous isomorphism t^./ : K End(C®/$'(a')) (8) Q, so 
we get an automorphism a = o m o t^,/ of K. The map m is given 
by an invertible {g x (7)-matrix {mij)ij, so diag"I> o a = mdiag$' implies 
(j>ia = mij(j}'j. As <1> consists of distinct embeddings, we find that m is a 
permutation matrix and that $ o a = which proves the claim. 

It now follows that ^*,a,e and ^$',o',4' are isomorphic if and only if 
(1) there exists an automorphism a oi K such that $' — ^ o a and (2) 
^*,a,4 is isomorphic to Ag>^„.a' ^a-^' ■ By Theorem 5 of |33j (originally [311 
Satz 3.19]), the last condition is equivalent to the existence of 7 G K" 
such that era' = 70 and a^' = (77)^, which finishes the proof of the 
theorem. □ 

We call two CM types $ and equivalent if there exists an automor- 
phism a of K such that = $ o ct. Theorem 14.11 gives us the following. 

Algorithm 4.2. Input: A CM field K that does not contain a strict 
CM subfield. 

Output: A complete set of representatives for the equivalence classes of 
abelian varieties over C with CM by Ok, each given by a triple ("l>,a, ^) 
as in Theorem 14.11 
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1. Let T be a complete set of representatives of the equivalence classes 
of CM types. 

2. Let (7 be a complete set of representatives of the group 

0*kJNk,Ko{0*k) 

of units of Okq modulo norms of units of Ok- 

3. Let / be a complete set of representatives of the ideal class group of 
K. 

4. Take those o in 7 such that {aaDK/Ci)~^ is principal and generated 
by an element ^ € K such that is totally negative in Kq. For each 
such a, choose a ^. 

5. For every pair (a, ^) as in step U and every unit u £ U, take the CM 
type $ consisting of those embeddings of K into C that map to 
the positive imaginary axis. 

6. Return those triples (<I>,a, m^) of step [5] for which $ is in T. 

Proof. By part [T] of Theorem 14.11 the output consists only of principally 
polarized abelian varieties with CM by Ok- Conversely, by part [2] of 
Theorem 14.11 every principally polarized abelian variety A with CM by 
Ok is isomorphic to A,s>,a,^ for some triple ($,a, ^). We can change this 
triple as in part[3]of Theorem l4.1l bv a unique a € Aut{K) and 7 = 1 G K* 
to get $ G T. This uniquely determines $ and cr. In the same way, we 
can use a — 1 and 7 G K* to get a in the set of step|4] We get that A is 
isomorphic to A,j>_a.u^ for some u £ Ok and a unique triple a, 5) with 
$ G T, a in the set of step |31 and ^ as found in step |3] Only the choice 
of u is left and by part |3] of Theorem 14.11 the isomorphism class depends 
exactly on the class of u in Ok/Nk/Ko{Ok)- 

Remark 4.3. Algorithm 14.21 is basically 33, Algorithm 1] with the dif- 
ference that we don't have any duplicate abelian varieties. 

Let h (resp. ho) be the class number of K (resp. Kg) and let hi = h/ho- 
We say that an abelian variety A is of type <!> for a CM type $ if A is of 
the form A^^^.i for some pair (a, ^). 

Proposition 4.4. The number of pairs ($, A), where ^ is a CM type and 
A is an isomorphism class of abelian varieties over C with CM by Ok of 
type $, is 

hi-#0*KjNK/K,{OK)- 

Proof. Let / be the group of invertible O/f-ideals and S the set of pairs 
(a, ^) with a G / and ^ G A'* such that is totally negative and £_Ok = 
(ooI?_K-/q)~^- The group K* acts on S via x{a,S_) — {xa,x~ x~ ^) for 
X G K* - By Theorem 14.11 the set that we need to count is in bijection 
with the set A*\S of orbits. 

We claim first that S is non-empty. Proof of the claim: Let z G K* 
be such that 2^ is a totally negative element of Ko- The norm map 
N ■- Cl(A') Cl(Ao) is surjective by [M Theorem 10.1]. As Vk/q and 
xOk are invariant under complex conjugation, surjectivity of A'' implies 
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that there exists an element y € Kq and a fractional Oif-ideal oo such 
that yooOo = z~^I'^Jq, so (ao, J/2) is an element of S. 

Let 5' be the group of pairs (b, u), consisting of a fractional O^-ideal 
b and a totally positive generator u £ ifg of bb. The group K* acts on S' 
via x(h, u) = (a;b, xa^it) for x G /C"*, and we denote the group of orbits by 
C = K*\S' . The map C — + K*\S : (b,it) i-^ (boo, is a bijection 

and the sequence 

Q^O*^JN^^^^^{0],) C Cl(7f)-.Cl(i^o)^0 

is exact, so K*\S has the correct order. □ 



4.2 Quartic CM fields 

We now describe, in the case g = 2, the set of equivalence classes of 
CM types, the group Olf^/TV^/^'a ^nd the number of isomorphism 

classes of CM abelian varieties. We say that a CM type $ of if is induced 
from a CM subfield K' if : </> G <E>} is a CM type of K' , and that it 

is primitive if it is not induced from any strict CM subfield. 

Lemma 4.5. Let K he a quartic CM field with the four distinct embed- 
dings (^1,02,(^1,02 and let $ = {(f)i , 4)2} , = {(j}i,(j>2}. Exactly one of 
the following holds. 

1. The field K is Galois with Galois group isomorphic to C2 x C2, each 
CM type is non-primitive, and there are two equivalence classes of 
CM types {$, $} and {"!>',$'}, each class induced from a different 
imaginary quadratic subfield of K. 

2. The field K is cyclic Galois, and all four CM types are equivalent 
and primitive. 

3. The field K is non-Galois, each CM type is primitive, and the equiv- 
alence classes of CM types are "!?} and {$', $'}. 

In cases 2 and 3, the field K does not contain an imaginary quadratic 
subfield. 

Proof. See [SJ Section 3.2]. □ 

In particular, for a quartic CM field, either all or none of the CM types 
are primitive and we call the field primitive or non-primitive accordingly. 
This definition coincides with the definition in Section [T] 

By Lemma 14.51 we can take the set T of Algorithm 14.21 to consist of 
a single CM type if K is cyclic and we can take T = {<&, $'} if K is 
non-Galois. The following lemma gives the set U. 

Lemma 4.6. If K is a, primitive quartic CM field, then 

Ok ~ IJ-kOkq, 

where C 0*k is the group of roots of unity and has order 2 or 10. 
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Proof. As K has degree 4 and does not contain a primitive third or fourth 
root of unity, it is either Q(C5) or does not contain a root of unity different 
from ±1. This proves that fiK has order 2 or 10. A direct computation 
shows that the lemma is true for K = Q(C5)j so we assume that we have 

^lK = {±1}. 

Let e (resp. eo) be a generator of (resp. O^^) modulo torsion. 
Then without loss of generality, we have eo ~ e*" for some positive integer 
k. By taking the norm Nk/Kqj we find eq — Nk/Kq{()'', so either fc = 1 
and we are done, or = 2. 

Suppose that k = 2. As K = Ko(^/7o) is a CM field, we find that eo is 
totally negative, and hence eg ^ is the conjugate of eo. Let x — e — e^^ £ K. 
Then a:^ = -2 + eo + eg ^ = -2 + Tr(eo) G Z is negative, so Q(a;) C if is 
imaginary quadratic, contradicting primitivity of K. □ 

Corollary 4.7. If A" is a primitive quartic CM field, then 

0*kJNk/Ko{Ok) = 0*kJO*k,^ = {±l,±c}, 
where c is the class of the fundamental unit e. 

Proof. This follows form Lemma [4.61 □ 

Lemma 4.8. Let A" be a quartic CM field. If K is cyclic, then there 
are hi isomorphism classes of abelian surfaces with CM by Ok- If K is 
non-Galois, then there are 2hi such isomorphism classes. 

Proof. Proposition 14.41 counts each such class exactly two or four times 
depending on whether K is Galois (by Lemma [4. 5p . Corollary 14.71 shows 
that #O^J7Vk/Ko(Ok) =4. □ 

4.3 Implementation details 

In practice. Algorithm 14.21 takes up only a very small portion of the time 
needed for Igusa class polynomial computation. The purpose of this sec- 
tion is to show that, for g — 2, indeed Algorithm 14.21 can be run in time 
0(A) and to show that the size of the output for each isomorphism class 
is small: only polynomial in log A. 

It is well known that class groups of number fields K of fixed degree 
can be computed in time 0(|A| 2), where A is the discriminant of K (see 
for example |23l I29j). The representatives of the ideal classes that are 
given in the output will be integral ideals of norm below the Minkowski 
bound, which is 3/{2n^) |A|^^^ for a quartic CM field. 

The class group algorithms show that for each a, we can check in time 
0(|A|2) if ooDk/q is principal and, if so, write down a generator ^. As 
Olf — fJ^xO^^, it suffices to check if is totally imaginary for any of 
the roots of unity in K (note that Q(C5) is the only primitive quar- 
tic CM field with more than 2 roots of unity). Then the set T and the 
group O'^g/Nji/Xo (C|f) s-re already given below Lemma [4.5l and in Corol- 
lary |4]7] respectively, where the fundamental unit e is a by-product of the 
class group computations. In particular, it takes time at most 0(|A|) to 
perform all the steps of Algorithm 14.21 
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A priori, the bit size of ^ can be as large as the regulator of K, but 
we can easily make it much smaller as follows. We identify K ^Yl. with 
via the embeddings 4>i,4'2 in the CM type $, and we consider the 
standard Euclidean norm on C^. Then we find a short vector 

in the lattice Ok \^\~^^^ C using the LLL-algorithm (see [24]) and 
replace a by ba and ^ by {bb)~^^. By part [3] of Theorem 14.11 this does 
not change the corresponding isomorphism class of principally polarized 
abelian varieties. This also doesn't change the fact that is in Ok and 
that a is an integral ideal. Finally, we compute an LLL-reduced basis of 
a C Ok ® R = C^. We get the following result. 

Lemma 4.9. On input of a primitive quartic CM field K, given as K = 
Q{y/—a + b^/7^) for integers a,6, Ao with < a < A, Algorithm 14.21 can 
be run in time 0(A) in such a way that for each triple (<E>,a, ^) in the 
output, the ideal o is given by an LLL-reduced basis, and both ^ £ K and 
the basis of a have bit size 0(Iog A). 

Proof. We run Algorithm 14.21 as described above the lemma. For each 
triple a, ^), before we apply the LLL-reduction, we can assume that a is 
an integral ideal of norm below the Minkowski bound, hence Nk/q{£,~^) = 
NK/Q{a)'^ Nk/qCDk/q) < CA^ for some constant C. 
The covolume of the lattice 

ler'''' Oa- C Ok ® R = 

is^'A7q(C"^)A^''^sowefindavector^)|5^^/^ G 1^1'^^^ Ok of length at 
most C"A''K/q(^~^)^''*A^/* for some constant C". In particular, bb^~^ has 
all absolute values below C"^iVx/q(C^)^'''*A^'''*. Therefore, 66^"^ has bit 
size 0(log A) and norm at most C'^ Nk/q{(,~^)^, so b has norm at most 
C'^Ai/2. 

This implies that 6a has norm at most C" A, so an LLL-reduced basis 
has bit size 0(log A). 

All elements x £ K that we encounter can be given (up to multi- 
plication by units in Ok^) with all absolute values below \/NK/Q{a) |ej 
Therefore, the bit size of the numbers in the LLL-algorithm is O(Regj^) = 
0(A^/^), hence the LLL-steps take time only 0{A^^'^) for each ideal 
class. □ 

5 Symplectic bases and the Siegel upper 
half space 

Let (C®/A, _E) be a principally polarized abelian variety. For any basis 
,629 of A, we associate to the form E the matrix M = {mij)ij € 
Mat2g(Z) given by E{bi,bj) — rriij. We say that E is given with respect 
to the basis 61, ... , 629 by the matrix M. 
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The lattice A has a basis that is symplectic with respect to E, i.e., 
a Z-basis ei, . . . ,eg,vi, . . . ,Vg with respect to which E is given by the 
matrix fl, given in terms of {g x (;)-blocks as 

The vectors Vi form a C-basis of and if we rewrite and A in terms 
of this basis, then A becomes ZZ^ + Z®, where Z is a period matrix, i.e. a 
symmetric matrix over C with positive definite imaginary part. The set of 
all g X g period matrices is caUed the Siegel upper half space and denoted 
by Tig. It is a topological subspace of the Euclidean 2(;^-dimensional 
R-vectorspace Matg(C). 

There is an action on this space by the symplectic group 

Sp^giZ) = {M G GL29(Z) : M'fiM = fi} C GL2s(Z), 

given in terms of {g x (?)-blocks by 



A B 
C D 



(Z) = {AZ + B){CZ + Dy 



The association of Z to (C^/ZZ^ + Z®, E) gives a bijection between the set 
of orbits Sp2g(Z)\7ig and the set of principally polarized abelian varieties 
over C up to isomorphism. 



5.1 A symplectic basis for $(a) 

Now it is time to compute symplectic bases. In Algorithm 14.21 we com- 
puted a set of abelian varieties over C, each given by a triple ("I>,o,^), 
where a is an ideal in Ok, given by a basis, ^ is in K* and $ is a CM type 
of K. We now identify a with the lattice A = "I>(a) C and recall that 
the bilinear form _B : a x a — > Z is given by E : {x,y) i— > Trx/aii^xy). We 
can write down the matrix A G Mat2g(Z) of E with respect to the basis 
of A. Computing a symplectic basis of a now comes down to computing 
a change of basis M G GL2g(Z) of a such that AM = VL, with ^ as 
in (121). This is done by the following algorithm. 

Algorithm 5.1. Input: A matrix A G Mat29(Z) such that A^ = -A 
and det A = 1. 

Output: M G GL29(Z) such that 

For j = 1, ...,<;, do the following. 

1. Let e'i G Z"^^ be a unit vector linearly independent of 

{ei, . . . , fii-i, wi, . . . , Ui-i}. 

2. Let 

1 / / '"^ t , '"^ t , \ 

ei = - - Yy.e]Ae'i)vj + ^(?;*Aei)ej j , 

where k is the largest positive integer such that the resulting vector 
e^ is in Z^s. 
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3. Let v'i be such that e\Av[ — 1. We will explain this step below. 

4. Let 

i-1 i-1 

Vi^v'i- '^{e)Av'i)vj + '^{v]Av'i)ej. 

Output the matrix M with columns ei, . . . ,eg,v-i, . . . ,Vg. 

Algorithm 15. H is very similar to Gram-Schmidt orthogonalization, ex- 
cept for stepO Existence of v'i as in that step follows from the facts that 
A is invertible and that Ci £ 7?^ is not divisible by integers greater than 1. 
Actually finding v[ means finding a solution of a linear equation over Z, 
which can be done using the LLL-algorithm as in [241 Section 14]. 

If we apply the Algorithm 15.11 to the matrix A mentioned above it, 
then the output matrix M is a basis transformation that yields a sym- 
plectic basis of A with respect to E. For fixed g, Algorithm 15.11 takes 
time polynomial in the size of the input, hence polynomial time in the bit 
sizes of ^ £ A" and the basis of a. Lemma 14.91 tells us that for g = 2, we 
can make sure that both ^ £ K and the basis of a have a bit size that it 
polynomial in log A, so obtaining a period matrix Z from a triple ("1>, a, (,) 
takes time only polynomial in log A. This implies also that the bit size of 
Z (as a matrix with entries in a number field) is polynomial in log A. 

6 The fundamental domain of the Siegel 
upper half space 

In the genus 1 case, to compute the j-invariant of a point z £TL = TL\, one 
should first move z to the fundamental domain for SL2 (Z) , or at least away 
from Imz = 0, to get good convergence. We use the term fundamental 
domain loosely, meaning a connected subset T of TLg such that every 
Sp2g(Z)-orbit has a representative in T, and that this representative is 
unique, except possibly if it is on the boundary of T. 

In genus 2, when computing ^-values at a point Z £ 7^2, as we will do 
in Section [8] we move the point to the fundamental domain for Sp4(Z). 



6.1 The genus 1 case 

For g = 1, the fundamental domain G TC is the set of z = x + iy £TC 
that satisfy 

(Fl) -| < s < i and 

(F2) \z\ > 1. 

One usually adds a third condition x > if |z| = 1 in order to make the 
orbit representatives unique, but we will omit that condition as we allow 
boundary points of to be non-unique in their orbit. To move z into this 
fundamental domain, we simply iterate the following until z = x + iy is 
in J^: 

1. z^ z+l-x+^\, 

2. z^-^i{\z\<l. ^"^^ 
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We will also phrase this procedure in terms of positive definite (2 x 2)- 
matrices Y £ Mat2(R), which will come in handy in the genus 2 case. We 
identify such a matrix 

\ y3 2/2 / 

with the positive definite binary quadratic form / — yiX^ + 2yzXY + 
y^Y^ £ R[X, y]. Let <j) be the map that sends Y to the unique complex 
number z Gli. such that f{z, 1) — 0. 

Note that SL2(Z) acts on Y via {U,Y) ^ UYU\ Now <p induces 
an isomorphism of SL2(Z)-sets from the set of positive definite (2 x 2)- 
matrices Y G Mat2(R) up to scalar multiplication to TC. 

Note that <fi~^{T) is the set of matrices Y such that 

- yi < 2y3 < yi < 1/2, (4) 

where the first two inequalities correspond to (Fl), and the third inequal- 
ity to (F2). We say that the matrix Y is SL2(Z)-reduced if it satisfies Q. 

We phrase and analyse algorithm ^ in terms of the matrices Y . Even 
though we will give some definitions in terms of Y , all inequalities and all 
steps in the algorithm will depend on Y only up to scalar multiplication. 

Algorithm 6.1. Input: A positive definite symmetric (2 x 2)-matrix Yo 
over R. 

Output: U G SL2(Z) and Y = UYoU^ such that Y is SL2-reduced. 
Start with Y = Yo and (7 = 1 G SL2(Z) and iterate the following two 
steps until Y is SL2-reduced. 

1. Let 

for r = [-y-i/yi + ij. 

2. If j/i > 2/2, then let 

Output U, Y. 

We can bound the runtime in terms of the minima of the matrix Yq. 
We define the first and second consecutive minima m\{Y) and m2{Y) of a 
symmetric positive definite (2 x 2)-matrix Y as follows. Let mi (Y) = p^Yp 
be minimal among all column vectors p G Z^ different from and let 
m2{Y) — q^Yq be minimal among all g G Z^ linearly independent of p. 
Note that the definition of 7712 (Y) is independent of the choice of p. We 
call mi{Y) also simply the minimum of Y . If y is SL2-reduced, then we 
have 

3 

m.i{Y)=yi, m.2[Y)^y2 and -?/ii/2 < det Y < 7/1^2, 
so for every positive definite symmetric matrix Y , we have 

^mi(y)m2(y) < dety < mi(y)m2(y). (5) 
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As we have 



1 A y / -1 



dety V -1 y VI 

it also follows that 

"14^-') = ^^, (iG{l,2}). (6) 

For any matrix A, let \A\ be the maximum of the absolute values of 
its entries. 

Lemma 6.2. Algorithm 16.11 is correct and takes 0(log(|j/ij /mi(yo))) 
additions, multiplications, and divisions in R. The inequalities 

|F| < 111)1 and \U\ < 2(detyo)"^/^ \Yo\ 

hold for the output, and also for the values of Y and U throughout the 
execution of the algorithm. 

Proof. The upper bound log(|yo| /mi (Fq))/ log(3) + 2 on the number of 
iterations is proven on the last page of Section 7 of [24]. Each iteration 
consists of an absolutely bounded number of operations in R, which proves 
our bound on the number of operations. 

Next, note that \Y\ is decreasing throughout the algorithm. Indeed, 
step 2 only swaps entries and changes signs, while step 1 decreases \y3\ and 
leaves yi and det Y — yiy2 — invariant, hence also decreases \y2\. This 
proves that we have |y| < |yb| throughout the course of the algorithm. 

Now let Co G Mat2(R) be such that CoCq = Vo- Then we have 
\Co\ < \Yo\^^^ and hence |C,7'| = IdctCoT'lCol < (det Yq)"^/" lYol'/^ 
As we have UCoiUCof = Y, we also have \UCo\ < \Y\^^^ < \Yo\^^'^. 
Finally, \U\ = |C/CoCo"'j <2\UCo\ \Co^\ < 2{detYo)-^^'^ \Yo\. □ 

6.2 The fundamental domain for genus 2 

For genus 2, the fundamental domain T2 is defined to be the set of Z — 
X + iY GH2 for which 

(51) the real part X is reduced, i.e., — i < Xi < i (i = 1, 2, 3), 

(52) the imaginary part Y is (GL2-)reduced, i.e., < 2^3 < yi < 1/2, and 

(53) |det M*(Z)| > 1 for all M G Sp4(Z), where M*{Z) is defined by 



M''{Z)=CZ + D for M 



A B 
C D 



Every point in TL2 is Sp4(Z)-equivalent to a point in T2, and we will 
compute such a point with Algorithm 16.31 below. This point is unique up 
to identifications of the boundaries of T2 as we will see in Lemma l6.12l 

Reduction of the real part is trivial and obtained by X i— > X + -B, for 
a unique B G Mat2(Z). Here X 1— > X + S corresponds to the action of 

J f ) G SP4(Z) 
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on Z. 

Reduction of the imaginary part is reduction of positive definite sym- 
metric matrices as in Algorithm 16. II but with the extra condition 2/3 > 0, 
which can be obtained by applying the GL2(Z)-matrix 

1 

-1 

ft follows that UYU^ is reduced for some U G GL2(Z), and to reduce the 
imaginary part of Z, we replace Z by 



(7) 



Condition (S3) has 
trices 



finite formulation. Let consist of the 38 ma- 
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in Sp4(Z), where d ranges over {0, ±1,±2} and each over {0, ±f }. 
Gottschling ITS] proved that, under conditions (SI) and (S2), condition 
(S3) is equivalent to the condition 

(G) |dctM*(^)| > 1 for all Af G 0. 

Actually, Gottschling went even further and gave a subset of 19 elements 
of (S of which he proved that it is minimal such that (G) is equivalent to 
(S3), assuming (SI) and (S2). 

For our purposes of bounding and computing the values of Igusa in- 
variants, it suffices to consider the set B C 7^2, given by (SI), (S2), and 

(B) yi > ^374. 

The condition (B) follows immediately from (SI) and \z\\ > 1, which is 
equivalent to \det{NQ {Z))\ > 1 for the single matrix 



0-1 \ 

1 



1 / 



so B contains 



6.3 The reduction algorithm for genus 2 

The reduction algorithm that moves Z G H2 into J^2 is as follows. 
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Algorithm 6.3. Input: Zo eU2- 
Output: Z in and a matrix 



^ = ( C D ) ^ ^P^(^) 
such that we have Z = M{Zo) = {AZq + B){CZo + 

We start with Z = Zq and iterate the following 3 steps until Z is in .7-2. 
During the course of the algorithm, we keep track of M £ Sp4(Z) such 
that Z = M{Zo), as we did with U in Algorithm 16.11 

1. Reduce the imaginary part as explained in Section [6.21 

2. Reduce the real part as explained in Section [6.21 

3. Apply N to Z ior N £ & with |det A''*(^)| < 1 minimal, if such an 
A'' exists. 

The algorithm that moves Z £ 0.2 into B is exactly the same, but 
with T2 replaced by B everywhere and with replaced by {A^o}- We will 
give an analysis of the runtime and output of Algorithm 16.31 below. The 
only property of the subset 25 C Sp4(Z) that this analysis uses is that it 
contains Nq, hence the analysis is equally valid for the modification that 
moves points into B. 

We will bound the number of iterations by showing that det Y is in- 
creasing and bounded in terms of Yo, that we have an absolutely bounded 
number of steps with \yi\ > i, and that every step with \yi\ < i leads to 
a doubling of det Y . 

Lemma 6.4. For any point Z G H2 and any matrix AI £ Sp4(Z), we 
have 

1 . T » detlmZ 

detlmM(Z) = 

^ ^ \det M*{Z)f 

Proof. In [181 Proof of Proposition 1.1] it is computed that 

ImM(Z) = {M*{Zfr'^{lmZ)M*(Z)-'^. (8) 

Taking determinants on both sides proves the result. □ 



Steps 1 and 2 of Algorithm 16.31 do not change detY, and Lemma 16.41 
shows that step 3 increases det Y, so det Y is increasing througout the 
algorithm. 

The following result allows us to bound m2(Y) and det F during the 
algorithm. It will also be very important in Section [3 where we bound 
the entries of the output of Algorithm 16.31 

Lemma 6.5. For any point Z = X + iY £ Ti.2 and any matrix AI £ 
Sp4(Z), we have 

m2{lmM{Z)) < ^max{mi(y)"\m2(y)}. 

Proof. We imitate part of the proof of [181 Lemma 3.1]. If we replace M 
by 

u ' 
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for U G GL2(Z), then the matrix (ImM(Z)) ^ gets replaced by the ma- 
trix U{ImM{Z))~^U^ , so we can assume without loss of generality that 
{Im M{Z)y^ is reduced. By ©, we have 

(ImM(Z))~^ = {CX -iCY + D)Y'^{CX + tCY + dY 

= {CX + D)Y~\XC'- + D') + CYC\ (9) 
A B 



where M = 



C D 



As the left hand side of (|9]) is reduced, we have that mi((ImM(^))^^) is 
its upper left entry. Let (ci, C2, di, ^2) G Z* be the third row of M and 
let c = {ci,C2),d — {di,d2) G Z^. We compute that the upper left entry 
of © is mi((ImM(Z))-i) = (cX + d)Y-\Xc' + d*) + cYc\ 

The matrix M is invertible, so if c is zero, then d is non-zero. As both 
and y are positive definite, this implies that 

■mi{{lmM{Z)y^) > min{mi(F),mi(y"^)}. 

By (lU and Q, we get 

4detImM(^) _ 4 



m2(ImM(Z)) < 



3mi(ImM(Z)) 3mi((ImM(Z))-i) 



^4 ,1 dety , 

< — maxl yr-r- , 7T77 [ 

4 

< -max{mi(y) ,m2(y)}, 

which proves the result. □ 

Lemma 6.6. There is an absolute upper bound c, independent of the 
input Zq, on the number of iterations of Algorithm [S3] in which Z satisfies 
1/1 > I at the beginning of step 3. 

Proof. Let C be the set of points in Ti.2 that satisfy (SI), (S2) and yi > i. 
At the beginning of step 3, both (SI) and (S2) hold, so we need to bound 
the number of iterations for which Z is in C at the beginning of step 3. 
Suppose that such an iteration exists, and denote the value of Z at the 
beginning of step 3 of that iteration by Z' . As dety increases during the 
algorithm, each iteration has a different value of Z, so it suffices to bound 
the number of Z G Sp4(Z)(Z') n C. By [181 Theorem 3.1], the set 

C = {M G Sp4(Z) : C n M(C) / 0} 

is finite. As £ surjects onto Sp4(Z)(Z') n C via M ^ M{Z'), we get the 
absolute upper bound #2 on the number of iterations with Z £C. □ 



Lemma 6.7. At every iteration of step 3 of Algorithm 16.31 in which we 
have < i, the value of dety increases by a factor of at least 2. 

Proof. If yi < \, then for the element A'^o G 25, we have |det A'^q (Z)|^ = 
\zi\^ — \x-i\^ + \yi\^ < |, so by Lemma 16.41 the value of dety increases 
by a factor > 2. □ 
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We can now bound the number of iterations. For any matrix Z = 
X +iy e Ui, let t{Z) = logmax{mi(y)-i,m2(F)}. 

Proposition 6.8. The number o] iterations of Alaorithm \6.^ is at most 
0{t{Zo)) for every input Zo- 

Proof. Let c be the constant of Lemma 16.61 let Zq be the input of Algo- 
rithm |6]3] and let Z be the value after k iterations. By Lemmas 16.71 and 
16.51 we have 

2'=-"detFo < dety < m2(y)'' < (i) Vax{mi(yo)~', m2(y,)'}, 
hence ((S)) implies 

2"-" < (^)'max{mi(yo)-='m2(yo)"\mi(yo)-'m2(yo)}. □ 

To avoid a laborious error analysis, we assume that all computations 
are performed inside some number field _F C C of absolutely bounded 
degree. Indeed, for an abelian surface A with CM by Ok and any period 
matrix Z G Ti.2 that represents A, we have that Z is in Mat2(F), where 
F is the normal closure of K, which has degree at most 8. For a runtime 
analysis, we need to bound the height of the numbers involved. Such 
height bounds are also used for lower bounds on the off-diagonal part of 
the output Z, which we will need in Section [S] 

The height h{x) of an element x £ F* is defined as follows. Let 
S be the set of absolute values of F that extend either the standard 
archimedean absolute value of Q or one of the non-archimedean absolute 
values \x\ = Por each v (£ S, let deg{v) = [F„ : Q„] be the 

degree of the completion F^ of F at v. Then 

= 'isg(^) max{log \x\^ , 1}. 

V 

We denote the maximum of the heights of all entries of a matrix Z G 'H2 
by h{Z). 

Next, we give bounds on the value of |A/j during the execution of 
the algorithm. This will provide us with a bound on the height of the 
entries of Z. Indeed, if we have Z = AI{Zo), then it follows that h{Z) < 
2(log|M| -f/i(Zo) +log4). 

Lemma 6.9. There exists an absolute constant c > such that the fol- 
lowing holds. The value of log \M\ is at most cmax{log \Zo\ , 1} during the 
first iteration of Algorithm 16.31 and increases by at most cma,x{t{Zo), 1}, 
where t is as above Proposition 16.81 

Proof. For step 1, it follows from equation ((7| and Lemma 16.21 that the 
value of log \ M\ increases by at most log \ Z\ + t{Z) + log 8. In step 2, the 
value of log|M| increases by at most log(l -I- 2|Z|). In step 3, the value 
of log \ M\ increases by at most log 4 by the definition of &. 

Therefore, it suffices to bound log|Z| appropriately at the beginning 
of steps 1 and 2. Note that log|y| decreases during step 1, while log|X| 
increases by at most max{log \ Z\ , 0} -I- log 16. Therefore, it suffices to give 
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a bound for log \Z\ only at the beginning of step 1. Note that for the first 
iteration, the bound log \ Z\ = log \ Zo\ suffices. 

At the beginning of step 3, we have \xi\ < i, and Y is reduced. We 
can thus use Lemma 16.51 to bound the coefficients of Y, and get |y| < 
4gt(2o)/3 This proves that we have log\Z\ < 3 max{f(Zo), 1}. During 
step 3, the matrix Z gets replaced by 



is in the set 0. We have \N{Z)\ < \det{CZ + D)^^ {2\Z\ + 1)^ jTVj^ 
We have already bounded \Z\, and we also have |A'^| < 4, so we only 
need to bound |det(CZ + Z))|"\ Lemma [Ol gives |det(CZ + = 
(detImiV(Z))(detIm(Z))"^ Let M' be such that Z = M'{Zo) and 
let M = NM', then Lemma 16.51 tells us that the numerator is at most 
4max{mi(yo)~^, m2(yo)}/3. Applying the fact that the determinant of 
Im(Z) increases during the execution of the algorithm, we thus find 

|det(C^ + D)r^ = 4max{mi(y;))~\m2(ro)}/(3detIm(Zo)), 

which is at most 16/9 max{mi(yb), 'Ti2(Yo)}'^ by ([5]). Therefore, for Z and 
A'' as in step 3, we have log |A(^)| = c' max{f(Zo), 1}, hence we find that 
c' max{t(Zo), 1} is an upper bound for log \Z\ at the beginning of step 1 
for every iteration but the first. □ 

Theorem 6.10. Let F <Z C be a number field. Alaorithm \6.3[ on input 
Zo £ Mat2(-F) n 7^2, returns an Sp4^{Z) -equivalent matrix Z £ J^2- The 
runtime is 0{h{Zo)\og\Zo\) -\-0{t{Zo)''') ■ Moreover, the output Z satisfies 
h{Z) — c' max{/i(^o), t(-^o) , 1}, for some absolute constant c . 

Proof. By Proposition [6]8] and Lemma r6.9l the value of log \M\ is bounded 
by 0(log \Zq\) + 0(f(Zo)^) throughout the algorithm, so the height of ev- 
ery entry of Z is bounded by 0{t[Z()f')~\-0{h{Zo)). This implies that each 
basic arithmetic operation in the algorithm takes time at most 0(t(Zo)^) + 
d{h{Zo)). By Lemma lO the first iteration takes 0(log \Zo\) + 0{t{Zo)) 
such operations, and all other 0{t{Zo)) iterations take 0{t(Zo)) opera- 
tions, so there are 0(log \Zo\) + 0{t(Zo)^) arithmetic operations, yielding 
a total run time for the algorithm of d{t{Zo)^) + d{h{Zo) log \Zo\) □ 

In Section [HI we bound the Igusa invariants in terms of the entries of 
the period matrix Z. One of the bounds that we need in that section is a 
lower bound on the absolute value of the off-diagonal entry Z3 of Z. It is 
supplied by the following corollary. 

Corollary 6.11. Let Zo G Mat2(F) n H2 be the input of Algorithm [Ol 
and let 23 be the off-diagonal entry of the output. Then either 2:3 is zero or 
we have — log j^sj < c' ma.x{h{Zo),t{Zo)^ , 1} for an absolute constant c'. 



N(Z) = {AZ + B){CZ + D) 



-1 




where 
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Proof. The field F is a subfield of C, which gives us a standard absolute 
value V. If 2:3 is non-zero, then the product formula tells us that we 
have -logj^sj = -log|23|^ = log l^sL < H^a), which is at most 

c' ma.x{h{Zo),t(Zof ,1} by Theorem ICTJl □ 

6.4 Identifying points on the boundary 

Now that we know how to move points to the fundamental domain J^2, 
the following lemma shows how to see if two points in are Sp4(Z)- 
equivalent. Using this lemma, one could, for example, eliminate duplicate 
abelian varieties if one chooses to use a non-proven alternative method 
for the class group computations in Algorithm 14.21 We do not need this 
lemma for the proof of the main theorem. 

Lemma 6.12. For every element Z of JF2, the set Sp^{Z){Z) C] J-2 can be 
computed as follows. 

1. Let S3 = {N(Z) eH2\N (£ &,\det N* {Z)\ = 1}. 

2. For Z'" e S3, let Sz'" be the set of (7 £ GL2(Z)/{±1} such that 
f/Z"'l7* satisfies (S2). 

We can compute S^'" as follows. 

(a) Let U be one element of Sz'" , which can be found using GL2 (Z)- 
reduction of Im Z'" as explained in Section 16.21 and let Y = 
UZ"'U\ 

(b) Write 

Y=( GMat2(R) 
and let V be the subset of GL2(Z) that contains 

if and only if y\ — y2, 
if and only if 2j/3 = yi , 
if and only if 1/3 = 0, 

and no other elements, so V has 0, 1, or 2 elements. 

(c) Let G be the subgroup of SL2(Z)/{±1} generated by V, so G 
has order 1, 2, 4, or 6. 

(d) We have Sz'" = GU. 

Let S2 = {UZ"'U' 1 Z'" eSi,U e Sz'"}. 

3. Let Si = {Z" +T{Z") e H2 \ Z" e S2}, where T{Z") G Mat2(Z) is 
the unique matrix such that Z' = Z" + T{Z") satisfies (SI). 

We have Si = Sp^{Z){Z) n T2. 

Proof. Let Z' be an element of Si and let M G Sp4(Z) be the matrix 
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where A'^, U , and T = T{Z") are as in steps 1, 2, and 3, hence we have 
M{Z) = Z' . By construction, Z' is Sp4(Z)-equivalent to Z and satisfies 
(SI) and (S2). Moreover, we have |detM*(Z)| = |detiV*(Z)| = 1, and Z 
satisfies (S3), so for any M' G Sp4(Z), we compute 

|detM'*(Z')j = |det(M'M)'(Z)j idetA/*(Z)r^ > 1. 

Therefore, Z' also satisfies (S3) and we have C Sp4(Z)(Z) nJ-2- 

Conversely, let M G Sp23(Z) be such that M{Z) is in For any 
M' e Sp4(Z), let 1{M') be the lower half of M' , i.e. the (2 x 4)-matrix 
having as rows the third and fourth row of M' . As both Z and M{Z) lie in 
^2, we have |detM*(^)| = 1, and Z satisfies (SI), (S2), and \zi\ , \z2\ > 1. 
The proof of [161 Satz 1] shows that this implies that we have 1{M) = 
(;7*)-^/(Af) for some U G GL2(Z) and some N £(8. 
Now M and 



are symplectic matrices with the same lower half, and this implies that 
(|10p holds for some symmetric integer matrix T. In particular, the matrix 
U{lmN{Z))U' = ImM(Z) satisfies (S2), hence Z" = U{N{Z))U^ is an 
element of 82. Finally, by uniqueness of T{Z"), we have T = T{Z") and 
hence M{Z) is an element of ^i. 

It remains to show that the set Sz'" computed in steps a-d is correct. 
This follows from the fact that if both UYU^ and Y are reduced, then 
{U mod ±1) is in the group G corresponding to Y. □ 

7 Bounding the period matrix 

In Sections [4] -[G] we gave an algorithm that computes one period matrix 
Z in the fundamental domain J^2 of the Siegel upper half space Ti.2 for 
every isomorphism class of principally polarized abelian surface over C 
with CM by Ok ■ In Section [S] we give bounds on the Igusa invariants in 
terms of the entries of Z. The purpose of the current section is therefore 
to bound the entries of Z. 

The period matrix Z was computed via a reduction algorithm, starting 
from the fairly arbitrary period matrix obtained in Algorithm 15.11 As a 
result, we cannot obtain optimal bounds via an analysis of the way Z was 
computed. Instead, we show the existence of an Sp4(Z)-equivalent matrix 
Z' on which we can get certain bounds, and transfer those bounds to Z 
using Lemma [6.51 Working directly with the period matrix Z' instead of 
Z in our algorithms is not an option, because Z' will not always be in the 
fundamental domain J^2, where Section [S] needs it to be. 

The bounds on Z and Z' axe given by the following two results. For 
a quartic CM field K, let A be the discriminant of K and let Aq be the 
discriminant of its real quadratic subfield Kq, so we have A = A^Aq, 
where Ai is the norm of the relative discriminant of K/Kq. 

Proposition 7.1. Let K be a primitive quartic CM field. Every prin- 
cipally polarized abelian surface with complex multiplication by Ok has a 
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symplectic basis for which the period matrix Z' — X' + iY' satisfies 

— r- < det Y' < ^— and 
6Ao ~ ~ 4 



<rm{Y')<m2{Y') < ^« 



VEAl^^ - '- '- 6 ■ 

We will prove Proposition 17.11 later. 

Corollary 7.2. Let K he a primitive quartic CM field and let Z be any 
period matrix corresponding to a principally polarized abelian surface 
with CM by Ok- Then we have 

/I rr\ ^ (Vs. 3/2 2 1/2.1/2, 

mallmZ) < max{ — Aq' , -A/ A,/ }. 



Proof of Corollary \7.S\ Any such period matrix Z can be obtained via 
Sp4(Z)-transformation from the matrix Z' of Proposition [TIT] Lemma [6. 5 1 
bounds m2(ImZ) in terms of the minima of Y': 

w,2(ImZ) < |max{ml(F')~^"^2(y')}• □ 

7.1 Relative quadratic extensions 

We will now show that, for a primitive quartic CM field K, every abelian 
variety with CM by Ok is isomorphic to A^^a,i as in Section |4l where a 
is of the form a = zb + b~'^ for some z £ K and some fractional Okq- 
ideal b. We will see that every such representation provides us with a 
symplectic basis, and hence a period matrix. We will obtain the period 
matrix of Proposition 17. II bv finding a 'good' pair {z, b). We state results 
for a general CM field where they are not harder. 

Let be a CM field of degree 2g and Kq its maximal real subfield. We 
assume that the different ©j^g/q of Ko is principal and generated by 5. 
If (? = 2 and Kq has discriminant Aq, then this is automatic and we can 
take 5 = VAq. For the general case, where I^Ka/Q may not be principal, 
see Remark 17.51 



Theorem 7.3. Let K be a CM field and Ko its maximal real subfield and 
suppose that T^Kq/q is principal and generated by 5. For every complex 
abelian variety A with CM by Ok, there exists an element z £ K such 
that a = zOkq + Okq C K is an Ok -module and for ^ = {z — 'z)~^S~^ 
and ^ — {(f} : K ^ C \ lni<j)£, > 0}, we have A = A,j>_a.^ as in Section^ 

Proof. By part[T]of Theorem 14. II we have A ~ ^*,o,5 for some a <Z K and 
^ £ K. As a is a projective module of rank 2 over the Dedekind domain 
Okq: we can write it as o = zc + yOKo for some Oxo-ideal c and z,y £ K. 
By part [3] of Theorem 14.11 we can replace a by y~^a and ^ by yy^, hence 
we can assume without loss of generality that we have y — 1. 

Recall that we have an alternating Z-bilinear form : a x a ^ Z, 
given by {u,v) Trx/Q(C™)- This form is trivial on zc x zc and Okq x 
Okq, and is alternating, hence is completely defined by its action on 
zc X Okq- Let T : Ko x Ko ^ Q be the Q-linear trace form {a,b) i—> 
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TiKo/Qiab), so we have E^{za, b) = T{^{z — z)a, b) for all a G c, & G Okq- 
Note that here £,{z — J) is an element of Kq. 

The fact that is principal (i.e. has determinant 1) implies that 
^{z — 'z)c is the dual of Okq with respect to the form T, which is f ^.J^g — 
S~^Oko by [281 §111.2]. It follows that : is principal, so without loss of 
generality we have c = Okq and hence £^ = {z — 'z)^^5^^ . □ 

The following result gives the converse, and also shows how to write 
down a symplectic basis of a in terms of z. Let T ; Kg x Kq — > Q be the 
Q-linear trace form {a,b) TrKo/Q{a,b). 

Theorem 7.4. Let K be a CM field and Kq its maximal real subfield and 
suppose that D/fg/q is principal and generated by S. Let b be a fractional 
OKg-ideal with Ti-basis bi,. . . ,bg and let b1, . . . ,b*g £ Okq be the dual of 
this basis with respect to the trace form T. 

Suppose z £ K is such that a — zb + b^^ is an Ox-submodule of K. 
Let C = {z~z)''^S-^ and •i' = {(j) : K ^ C : Irn^C > 0}. Then ($,a,C) 
is a triple as in Section^ and the basis 

$(^6i),...,$(^6,),$(56-),...,$(56;) 

o/"l?(a) is symplectic with respect to the polarization E^. 

Proof. A straightforward computation shows that the given basis of "l?(o) 
is symplectic for E(^. This implies that ^ generates (aaOx/Q)"^ just as in 
the proof of part [2] of Theorem |4T] □ 

Remark 7.5. If O^^yg is not principal, then Theorems 17.31 and 17.41 still 
hold, if we change zOkq+Okq into zV~^^^^+Oko, and adapt the formulas 
for 5, $, and the symplectic basis accordingly. 

For z £ K, let I(z) — ]~[^|Im<^2|, where the product ranges over 
the embeddings : ^ C up to complex conjugation, so I{z)'^ = 

The following lemma bounds the consecutive minima of the imagi- 
nary part of the period matrix corresponding to the symplectic basis of 
Theorem 17.41 in the case g = 2. 

Lemma 7.6. Suppose that we have <? = 2 and let (z, b) be as in The- 
orem 17.41 Let Z = X + iY he the period matrix corresponding to the 
symplectic basis of that theorem. Then we have det Y — I{z)N{b)'^ and 

-^N(b)I{zy/^ < mi(F) < m2(F) < ^^N{b)I(z)'^\ 

3 

Proof. Let bi, 62 be a basis of b. Let c be the non-trivial automorphism of 
Kq. Then 6162 — 6261 = iN{b)S. Without loss of generality, we assume 
that the sign here is positive. We now have 61 = b2N{b)~^5~^ and 62 = 
-bf7V(b)-i<5-^ Indeed, we have Ti{bibl) = Tr(b262) = 1 and Tr(&i&^) = 
Tr(fe26*) ~ 0. Let <I> = {(f)-i_ , 4)2} be the set of embeddings (p : K C such 
that Im (j>{z5~^) > 0. The symplectic basis of $(0) given in Theorem 17.41 
now reads 

/ Mzbi) \ ( Mzb2) \ J_ ( Mb2) \ _±_ ( Mbt) \ 
\ Mzbi) J ' \ Mzb2) J ' N{b) \ Mbi) J ' N{b) \ Mbi) J ' 
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Let n £ Mat2(C) have the first two vectors as columns and Q' G Mat2(R) 
the last two, so ^ = Then we have that detQ' = -iV(b)" Vi (5), 

so 

and hence 

1 ™ 

Let Y = ImZ. Recall that the first minimum mi{Y) of Y is the minimal 
value of {m,n)Y{m,ny for {m,n) e Z^\{(0,0)}. Let f = mu + nv G b~^. 
Then 

(m, n)y"(m, n)' = Im{(l)i(zt^5^^)) +Im{(l)2(zt'^S~^)) 

= 2J(^)Ao |iVA'o/q(t)| . 
As lA^Ko/qW| > N{b) for i / 0, we get 

mi(F) > 2iV(b)Ao '/'/(z)'/^ 

As n' is real, we also get that Y — ^' ^ Im Q and hence that det Y = 
(detn')"^ det(Imr2). We have detlmfi = I{z)N{b)<pi{S), so we get that 
dety = I{z)N{bf. 

Finally, the inequality mi{Y)m2{Y) < | det Y gives the upper bound 
onm2(y). □ 

To prove Proposition 17.11 we need to find a pair {z, b) for which we 
have both a good upper and a good lower bound on I{z)N{b)'^ . We first 
give an upper bound that holds for every pair {z, b). Then we show how 
to find (z, b) such that I{z)N(b)^ is large and we give a lower bound on 
I{z)N{b)'^ for that particular pair. 

We do this for the general case where K is a, CM field of degree 2g. 

Lemma 7.7. Let K he a. CM field of degree 2g with maximal totally real 
subfield Kq. Suppose that zb + b~^ is an Oif-submodule of K for z £ K 
and b a fractional Oifp-ideal. Then {z — z)b^OK contains the relative 
different Vk/Ko C Ok- Moreover, we have /(z)A''(b)^ < 2~^Al^^. 

Proof. For any a G Ok, we have aw G zb + b^^ for all w G b~^. Therefore, 
we have a — uz + v with ?i G b^ and v G Okq ■ We thus find that 
a — a = u{z — 1) is in {z — z)b'^ for all ct G Ok- The set of all a — a as 
a ranges over K generates the relative different Vk/Ko as an O/f-ideal, 
which proves the inclusion of ideals. 

Taking the norm Nk/q of this inclusion, we find exactly the bound 
on I{z)N{bf. (Note that we have NK/QibOK) = ^'(b)^ where A^(b) is 
defined to be Ai'jfQ/q(b).) □ 

The following lemma gives the lower bound. 
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Lemma 7.8. Let if be a CM field of degree 2g and Ko its maximal real 
subfield and suppose that D^q/Q is principal and generated by S. 

There exists a constant C, depending only on g, such that for every 
complex abelian variety A with CM by Ok, there exist an element z £ K 
and an integral Oxo-ideal b C Okq such that the following holds. The 
subset a = zb + b^^ C if is an Oif-submodule, we have I{z) > CA^^, 
and for £^ — {z — z)^^5~^ , we have A = A,s>,a^^ as in Section|4] 

For g = 2, we can take C = 

Proof. By Theorem 17.31 we have A = A$ with a — z'Okq +Oko and 
^ = (2' — z')~^5~^ with z' e K. Identify a with its image $(a) inside C®. 
Then is a lattice of covolume AoI{z'). For B > 0, define the set 5* by 

9 
J=l 

Then 5* has volume BC' for some constant C' depending only on g. Take 
B = C"~^Ao/(2'), so that by Minkowski's convex body theorem, there 
exists a non-zero element y = bz' + d G a' C] S with b,d £ Okq ■ As we 
have y£S,we find nf=i 10.(^)1 < (f Ef=i 10.(^)1)^ < g-'B^'\ 

Let b = bOifo + dOKf, C Ojfoi choose a, c G b~^ C i^o such that 
ad — be — 1 , and let 

az' + c az' + c 1 
z = = and t = (2; — 2) 

Then — j/~^o' and ^ = i/y.^', so A = ^*,o,5 by part[3]of Theorem 14. II 
Finally, for i — 1, . . . ,g, we have 

, , , . az' + c lm(j)iz' 
Im 4>iZ — ImSi = 

y l^^yf 

Taking the product over all i, we find 

Hz) > (|)'«C'Ao-\ 

so C= {g/2f<^C' suflices. 

Finally, for g — 2, we compute C — C' — 7r^/6. □ 



Proof of Proposition yLl\ Given a CM abelian surface A, let z € K and 
the ideal b C Okq be as in Lemma [7.81 By Lemmas 17.71 and 17.81 we have 

Z^A-</(2)iV(bf <iAt/^ 

Let Z be the period matrix corresponding to the symplectic basis of The- 
orem [7]4] Then Lemma [7. 61 proves the bounds that we need to prove. □ 

Remark 7.9. The element z £ K can be interpreted as a point 

(sign(</>i5)(^,z)f^i 

in the Hilbert upper half space W , which is the p-fold cartesian product 
of the upper half plane Ti = Tii = {2 G C | Im 2 > 0}. 
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The Hubert moduli space SIj2{0 Kq)\'H^ parametrizes abelian varieties 
with real multiplication by Okq, of which abelian varieties with complex 
multiplication are special cases. 

It is possible to formulate the theory above in terms of the Hilbert 
moduli space. Lemma 17.81 is inspired by Lemma 2.2 of [31], which is 
formulated in that language. 

7.2 Generalization of Spallek's results 

Spallek, in her thesis [JI], gave a formula for the period matrices of a 
complete set of reprentatives of the isomorphism classes of abelian sur- 
faces with CM by a given primitive quartic CM field K of which the real 
quadratic subfield Kq has class number one. This formula has been the 
method of choice of various authors ( '8', '37' ) . The theory of the preceding 
section allows us to simplify Spallek's results and to generalize them to 
arbitrary primitive quartic CM fields. We will not need anything from 
Section [7.21 in the rest of the text. 

Let K he a. primitive quartic CM field with real quadratic subfield Kq 
and let u £ Kq be such that Okq = Z[ci;]. 

Lemma 7.10. Suppose that z £ K is such that zOkq + Okq is an Ok- 
ideal. Let cj>\, 02 be the embeddings of K into C given by (j)iLu > 4)2UJ and 
\va(j)\{z) > > \mcj>2{z). Then the period matrix corresponding to the 
symplectic basis of Theorem 17.41 is 

Proof. Choose b\ = to and 62 = 1 in □ 

Theorem 7.11. Let K be a primitive quartic CM field. A complete set 
of representatives for the equivalence classes of abelian varieties over C 
with CM by Ok can be given as follows. 

1. Let $ = {4)1, 4)2} be a CM type of K. 

2. Let e G 0%:^ be such that (—1) x (e) has odd index in O^g. 

3. Let K,' d K be such that {zOkq +Oko : z £ K.'} is a complete set of 
representatives of the ideal classes of K that contain an ideal of the 
form zOko + ^Kq ■ 

I Let K. = ±K.' U ±eIC' . 

5. If K is cycUc Calais, return 

{Z^ \ z e IC,lm(j>iz > > Im(j)2z}. 

6. If K is non-Calois, return 

{Z-^ I z G ]C,lm4>iz > 0}. 

Proof. Algorithm 14.21 gives a complete set of representatives of the iso- 
morphism classes of principally polarized abelian varieties over C with 
CM by Ok. Theorems I7.3l and l7.4l show that the ideal classes a of step [4] 
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of Algorithm 14.21 are exactly the ones that contain a representative of the 
form zOko + C'iTo- Moreover, ^ = {z —Y)~^5~^ gives a choice of ^ as in 
step m of Algorithm 14.21 

We use Corollarv 14.71 to compute Oxg/Nx^Xgi^K) (which consists of 
the classes of ±1 and ±e) and Lemma 14.51 to compute a complete set of 
representatives for the equivalence classes of CM types ({"I"} if K is cyclic 
Galois and {(pi, 02}} if K is non-Galois). 

Multiplication of ^ by u G C/Cg corresponds exactly to multiplication 
of z by u^^ , so JC corresponds exactly to the set of pairs {{a,^),u) of step 
[5] of Algorithm 14.21 Steps [5] and [6] of the theorem that we are proving are 
exactly the selection of step [S] of Algorithm 14.21 □ 

A similar result holds for arbitrary g with zOkq + Okq replaced by 

7.3 Alternative algorithm 

The theory of Section 17.11 allows us to give an alternative to Algorithm 
14.21 for computing a complete set of representatives of the abelian vari- 
eties with CM by the ring of integers Ok of a CM field K of degree 2g. 
This is not important for the rest of the text, since computing this set 
of representatives makes up a negligible part of the run time in our main 
theorem. 

Here is how to enumerate all abelian varieties with CM by Ok directly 
in terms of pairs {z, b) as in Section [7.11 First of all, we restrict to pairs 
{z, b) such that all elements of zb + b~^ have norm > 1. Indeed, the pair 
(a, b) of Lemma r7.8l satisfies this condition by the construction in the proof. 
That proof also shows that any such choice satisfies I{z)N{b)'^ > CAq^ 
for an effective constant C depending only on g. 

We start by computing a set of representatives of the ideal classes 
of Kq, and we can restrict to b that are in this set, because we have 
z{ub) + (wb)-^ = u-'^{{zu^)b + b-^) for aU u G K^. 

We fix D G Oko such that we have K = Ko{\/D), and note that for 
every pair (z, b), we have \/D = az-f-b with a G b^, & G Okq- Therefore, for 
each b, we will enumerate a list of such pairs a, b and set z — a^^{\/D — h) . 

For each b, we compute a fundamental parallelogram in Ko ® R for 
translation by b~^, and we restrict to z that are in this fundamental 
parallelogram. This makes the list of 6's finite for each a. 

We also compute a fundamental parallelogram in the coordinate-sum-0 
subspace of for translation by vectors (log \(j>iu\)l^-^ with u G Olcg. We 
restrict to z such that {\og\(j)iz\)l^-^ = rv for some r G R and v in this 
parallelogram. This final restriction, together with the fact that we have 

NK,/^{a) < |iV,,„/q(D)'/'| < c\Nk„/q{D)'^'\ N{b)-^A^' 

makes the set of a's finite for each b. 

We have now narrowed the search down to a finite set of pairs (2, b), 
and we can compute this set of pairs if we can compute the class group 
and unit group of Kq and know how to enumerate elements of Okq of 
bounded norm. 
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Once we have our list of pairs (2, b), Theorem 17.41 provides us with 
symplectic bases, and hence period matrices, Algorithm 16.31 shows how 
to move the period matrices to a fundamental domain, and Lemma 16.121 
shows how to eliminate duplicates from our list. 

We can also eliminate duplicates from our list by enumerating all ele- 
ments of norm 1 in + C A' up to multiplication by Olc^. For each 
such element, the proof of Lemma 17.81 shows how to find another pair 
{z, b), corresponding to the same principally polarized abelian variety. 

If (/ = 2, then the class group and the fundamental unit of Kq can 
be computed using the theory of reduced ideals as described for example 
by Lenstra [22) . It is not hard to derive from that theory a method for 
enumerating the elements of Okq of norm below a given bound. 

Remark 7.12. In the language of the Hilbert upper half space of Re- 
mark 17.91 our finite list of pairs {z, b) corresponds exactly to the set of 
CM-by-OA'-points in the fundamental domain described in Section 1.3 

of [32]. 

8 Theta constants 

To compute the absolute Igusa invariants corresponding to a point Z G 
Ti.2, we use theta constants. For z £ C, let E{z) — e"^^ . We call an element 
c £ {0, a theta characteristic and write c — (ci, C2, C3, C4), c' = (ci,C2) 
and c" = (c3,C4). We define the theta constant of characteristic c to be 
the function 9[c\ : Ti.2 — > C given by 

0[c]{Z)= E{{n + c')Z{n + c'Y + 2{n + c)c"^) 

neZ2 

and following Dupont ^6], we use the hort-hand notation 

6l6c2+8ci+4c4+2c3 = d[c]. 

We call a theta characteristic — and the corresponding theta constant — 
even or odd depending on whether 4c' c"* is even or odd. The odd theta 
constants are zero by the anti-symmetry in the definition, and there are 
exactly 10 even theta constants 60, 61,92,63, 64,, Oe, 9s, 6g,9i2 and 615. 

8.1 Igusa invariants in terms of theta constants 

Let T be the set of even theta characteristics and define 

s = {ccr| #c = 6,^cG z*}. 
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Then S consists of 15 subsets of T, each consisting of 6 even theta char- 
acteristics, and we define 



(12) 



CSS cSC 



CSS cSC 
dST\C 



so each is a sum of tk monomials of degree 2k in the 10 even theta 
constants, where t4 — 10, tio = 1, ti2 ~ 15 and tie = 60. 

Lemma 8.1. Let Z he a, point in Ti.2- If hio{Z) is non-zero, then the 
principally polarized abelian variety corresponding to Z is the Jacobian 
of a curve C/C of genus 2 with invariants 



Proof. Thomae's identities [27] give an equation for such a curve C in 
terms of the theta constants. If we use these formulas to write out the 
definition of I^, I4, I^, and Jj^q, and use standard identities between the 
theta constants, then Lemma l8.ll follows. This was done by Spallek [31| . 
who gave a page-filling explicitly written-out definition of the h^, that 
contains a few misprinted exponents. The same result with the correct 
exponents can be found in [S^ and [8], and, in a form that fills 'only' half 
a page, in [51 Section 6.3.3]. Our version of the result is equivalent to the 
versions in [HI I1I3Z]. □ 

Corollary 8.2. Each element of the ring Q[-?2i ^4> -^6> -^10^] ^le ex- 
pressed as a polynomial in the theta constants divided by a power of the 
product of all even theta constants. 

This corollary implies that if we give upper and lower bounds on the 
absolute values of the theta constants, then we get upper bounds on the 
absolute values of the absolute invariants. Furthermore, we can bound the 
precision needed for the theta constants in terms of the precision needed 
for the absolute invariants. 

Remark 8.3. Lemma [8 . 1 1 explains our choice of absolute Igusa invariants 
ii — I^Iglio', i2 = I'll 2-^ 10 ^ *i ~ lllio'- Ihsy are chosen to have the 
minimal number of factors hio in the denominator. 



h{C) 
h{C) 

hic) 



hi2{Z)/hiQ{Z), 
hiiZ), 

hieiZ)/hio{Z), 
hio{Z). 
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8.2 Bounds on the theta constants 



For Z £ 7^2, denote the real part of Z by X and the imaginary part by 
F, write Z as 

21 23 
23 22 

and let Xj be the real part of Zj and j/j the imaginary part for j = 1, 2, 3. 
Recall that B C 7^2 is given by 

(51) X is reduced, i.e., -1/2 < < 1/2 for i = 1,2,3, 

(52) y is reduced, i.e., < 2y-}, < j/i < j/2, and 
(B) yi > x/374. 

Proposition 8.4. For every Z £ B, we have 

|6l,(Z) - 1] < 0.405 je {0,1,2,3} 



- 1 



2((_l)j + E{zz))E[\{z^ + 22 - 223)) 



- 1 



< 0.348 j G {4, 6} 

< 0.348 j e {8, 9} and 

< 0.438 J G {12, 15}. 



Proof. The proof of Proposition 9.2 of Klingen [18| gives infinite series 
as upper bounds for the left hand sides. A numerical inspection shows 
that the limits of these series are less than 0.553, 0.623, 0.623 and 0.438. 
Klingen's bounds can be improved by estimating more terms of the theta 
constants individually and thus getting a smaller error term. This has 
been done in Propositions 6.1 through 6.3 of Dupont [6], improving the 
first three bounds to 0.405, 2\E{zi/2)\ < 0.514 and 2|£;(22/2)| < 0.514. 
The proof of [51 Proposition 6.2] shows that for the second and third 
bound, we can also take 0.348. □ 

Remark 8.5. Actually, we can replace the condition yi > ^3/4 ~ 0.866 
in the definition of B by the weaker condition yi > 0.640. In that case, 
Dupont's estimates would give different upper bounds in Proposition 18.41 
that are still less than 1. 

Corollary 8.6. For every Z £ B, we have 



9AZ)\ < 
9j{Z)\ < 
%{Z)\ < 



1.41, 
1.37, 
1.56. 



0-G{0,l,2,3}) 
(jG{4, 6,8,9}) 
U G {12, 15}) 



Proof. These upper bounds follow immediately from (S2), (B), and Propo- 
sition 1831 □ 



Lemma 8.7. Let 23 be a non-zero complex number with Im(23) > and 
|R.e(23)| < i. Then we have |1 - £'(23)! > min{i, I23I}. 
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Proof. If |Re(23)| > ^, then |l - e'^'^^ | > sin(7r/6) = i. If Im(z3) > jq, 
then |l-e"'"3| > i _ e'^/^o > i. 

If |Re(23)| < ^ and Ini(z3) < j^, then let a = 7112:3, so 



Lemma 8.8. For every Z £ B, we have 



2 3 

a + + > |a|(l-|a|(e-2))> |Z3| □ 



0.59 


< 




(je {0,1,2,3}) 


1.3 exp(-fi/i) 


< 


\0AZ)\ , 


(je{4,6}) 


1.3 exp(-fi/2) 


< 


MZ)\ , 


0g{8,9}) 


1.05 exp(-f(yi +1/2 -21/3)) 


< 


1^12(^)1, 


and 


1.12 exp(-f(j/i+y2-2j/3))i^ 


< 


1^15(^)1, 





where u — mm{j, 

Proof. This follows from Proposition 18.41 if we use Lemma [8.7l to estimate 
|1 — E{z3)\ from below and we use the bounds 



|1 + £;(23)| > 1, exp(--j/0 > 0.506 (iG{l,2}) and 

exp {-jiyi + 2/2-2 |y3|)) > exp [-^y2^ > 
Corollary 8.9. For every Z £ B, we have 



0.256. 



□ 



log2 \h4Z)\ 


< 


8, 


\og,\hio{Z)\ 


< 


11, 


I0g2|/ll2(^)| 


< 


17, 


l0g2|ftl6(Z)| 


< 


23, 


\og^\hw{Z)\ 


< 


3 + 7r(j/i + y2 - 2/3) + max{2, - log^ \z-s\}, 


l0g2 \in{Z)\ 


< 


46 + 2Tv{yi +2/2-2/3) + 2max{2, - logj |23|} 



(nG {1,2,3}). 

Proof. The upper bounds on /14, hio, fti2, and hie follow from the bounds 
of Corollary 18.61 The lower bound on hio follows from the bounds of 
Lemma 18.81 The upper bounds on in follow from the formulas of Lemma 
18. II and the bounds on hk. □ 



Remark 8.10. Lemma 18.11 together with Corollary 18.91 gives a con- 
structive version of Theorem 13.21 Indeed, if 23 = 0, then the principally 
polarized abelian surface A{Z) corresponding to Z is the product of the 
polarized elliptic curves C/(2iZ + Z) and C/(22Z + Z), while if 23 7^ 0, 
then CoroUarv 18.91 shows that hio{Z) 7^ 0, so A{Z) is the Jacobian of the 
curve of genus 2 given by Lemma l8.ll 
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8.3 Evaluating Igusa invariants 



We get the following algorithm for evaluating the absolute Igusa invariants 
from the theta constants. We show how to evaluate theta constants in 
Algorithm [8TT31 

Let 2 e C be a complex number and n a non-negative integer. An 
approximation z of 2 of absolute precision n is an element of 2~"Z[j] C C. 
The (absolute) error of z is e(2) — \z — z\. 

Let A; be a non-negative integer and / : C''" ^ C a map. For ex- 
ample, for A; = 2, we have addition and multiplication, for A; = 0, we 
have the constant tt, and for A = 1, we have the exponential map exp, 
and for every fixed m G Z, the exponentiation x 1— > a;™. For elements 
zi, . . . ,zjc G C with approximations zi, . . . ,Zk, let z — f{z\, . . . , z^) and 
let z be f(z-i, . . . , Zk), rounded to a nearest element of 2~"Z[j]. 

For each of the examples / above, the approximation 'z oi z can be 
computed from zi , . . . , in time 

0(n + max{0, log \z\ , log l^ij | i = 1, . . . , fc}) 

using "fast multiplication" techniques (see e.g. [T|). The error e(z) is at 
most 

|2-/(Ii,...,i-fc)|+2-". 

Actually, the advantage of using absolute precision is that we don't have 
a rounding error in the case of addition, so that we can leave out the term 
2~" and get e{z) < e(?i) -I- £(22). For multiplication, we have 

< \z2 \ + e(z2) \zi \ + e(zi)e(22) + 2"". 

Algorithm 8.11. Input: A positive integer s and approximations 9j{Z) 
of all even theta constants Oj{Z) for some Z £ B with an absolute error 
of at most 2~°. 

Output: Approximations iniZ) of the Igusa invariants in(Z) for n = 
1,2,3. 

1. Evaluate each of the products A in the definition p2|l of the func- 
tions /14, /iio, /112, and /lie by factor- by- factor multiplication with an 
absolute precision of s, i.e. start with A ^ \ and let A ^ AB for 
every factor B. 

2. Evaluate each of the sums of in the definitions of /i4, ftio, /112, and 
/ii6 by term-by-term addition with an absolute precision of s. 

3. Evaluate 

ii = h4highio , i2 = h\h\2hxQ , and iz — h^hiQ 

with an absolute precision of s. 

Proposition 8.12. Let m = 3 -I- n{yi + y2 — ys) + max{2, — logj \zs\}. If 
s is > 13 + 2u, then the output of Alaorithm \8. ll\ has an error of at most 
2ioo+3ii-s^ r/ie runtime is 0{s) as s tends to infinity, where the implied 
constants do not depend on the input. 
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Proof. For any term A in step 1, let Ai be A after i factors have been 
multiplied together, so \Ai\ < 1.56\ Let Ai be the approximation of Ai 
that is computed in the algorithm, and let A = A2k be the approximation 
of A obtained in this way. Then for the error, we have e(^o) ~ and 
e{Ai+i) = 1.56e(l0+l-56^2-^+2-''. By induction, we get < 2^+'-", 

so that the approximation A of each term A in hk has an error of at 
most e(^) < 2^+^*"". The error of hk itself wiU therefore be less than 

Next, we evaluate h^Q. Let let /iio be the approximation that we 
have just computed, so |/iio — hio\ < 2^^"" and \hio\ > 2"". As we have 
s > 13 + u, we find 



ft' 10 



\2 + 2 



11 — s + u\ 



< 2 



14+3-11- 



so we find an approximation of h^g with an error of at most 2^*+^""". 

Finally, we evaluate 11,12, and 13, and the bound on their errors follows 
from the absolute value and error bounds on hk and h'[Q . □ 



8.4 Evaluating theta constants 

Algorithm 8.13. Input: A positive integer s, an approximation Z of 
a matrix Z £ B with sufficiently small error, and the theta characteristic 

ce{o,^y'. 

Output: An approximation 6[c]{Z) of 8[c]{Z). with absolute error at 
most 2"". 

1. Compute 

R= ["(0.45 + 2.2)^/^1 G Z. 

2. With an absolute precision of t = s + 1 + [21og2(2i? + 1)J , compute 
an approximation A of 

A^ Yl E(^{n + c')Z{n + cY + 2{n + c')c"'y 

nSZ^ 

\"i\<R 

3. Output A. 

Theorem 8.14. The output of Alaorithm \8. is correct if the input is 
given with an absolute error of at most 2~*~^. The algorithm takes time 

Proof. A precision of t in the input and the evaluation ensures that each 
term of the output approximation A of A has an error of at most 2~*, so 
that we have 

\A- a\< (27? + 1)^2"* < 2"'-\ 
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Next, we have 



\A-e[c]{Z)\< J2 exp(^-^((ni + ci)V + ('^2 + C2)'y2)) , 

|ni|>J? or \n2\'>R 

because < 2ys < j/i < j/2 implies nf j/i +nin2?y3 + ?i2j/2 > + niy2) 

for all n £ R^. Now for positive real numbers t and non-negative integers 
/, let 

°° 3 
fit J) = '^e^Pi^^-^k'^t), 

k=l 

SO that we find 

\A-e[c]{Z)\ < 4/(yi,i?)/(y2,0) + 4/(j/i,0)/(j/2,i?), 

If f > ^3/4, then we have 

°° 3 3 
fit, I) < ^exp{ TTtfc) < 1.15exp( ttU'^), 

SO 

2 o 

\A-e[c]{Z)\ < 5.29^exp(-^7ry,i?2) < 2""-^ 
1=1 

Therefore, 

|I- 6»[c](Z)| < 2~''~\ 

For each term, it takes time 0{t) = 0(s) to evaluate the term and add 
it to the result. The number of terms is {2R + 1)^ = 0(s), which proves 
the runtime. □ 



8.5 Improvements 

It may be possible that variations of Algorithm 18.131 such as evaluation 
of multiple theta constants at once or evaluation of a theta constant at 
multiple points in 7^2 at once, improve upon the (quasi-quadratic) com- 
plexity given by Theorem 18.141 We will not go into the details of any 
of these possibilities, because they do not seem to give anything that is 
as good as the quasi-linear-time conjectural method described by Dupont 
in his thesis j6J. Dupont gives a method for computing theta constants 
in genera 1 and 2 using Newton iterations and (a generalization of) the 
arithmetic-geometric mean (AGM) . Proving results for the genus 2 version 
of Dupont's method is beyond the scope of this paper, partially because 
there is no error analysis yet, even for the genus 1 method, and partially 
because the correctness of the genus 2 method depends on a few unproven 
assumptions. 
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9 Denominators 



Let K he a, primitive quartic CM field. In this section we give bounds on 
the degree and the denominators of Igusa class polynomials of K. We will 
give our bounds in terms of the discriminant Ao of the real quadratic sub- 
field Ko and the norm Ai = Nif^^ci{Aj(/Xg) of the relative discriminant 
Ak/Ko of K/Ko- Note that we have A = AiAq. 

By the denominator of a polynomial / G Q[-'f], we mean the minimal 
positive integer c such that c/ G Z[X]. 

We start by bounding the degree. Denote the class numbers of K and 
Ko by h and ho respectively, and let hi = h/ho. The degree of the Igusa 
class polynomials HK,n for n = 1,2,3 is the number h' of isomorphism 
classes of curves of genus 2 with CM by Ok, and by Lemma [4.81 we have 
h' = hi if K is cyclic and h' — 2hi otherwise. The following result bounds 
hi and hence this degree h' . 

Lemma 9.1 (Louboutin [25j). There exist effective constants d > and 
such that for all primitive quartic CM fields K with A > TV, we have 

AY^Al^^logAy" <hi< Ay'Aj/'(logA)^ 

Proof. Louboutin |2?l Theorem 14] gives bounds 

logfti _ I 
log(AiAo) " 2 

for A > N. As we have A > AqAi, this proves the result. □ 

The main result of this section is the following. 

Theorem 9.2. Let K be a primitive quartic CM field of discriminant A. 
If 2 and 3 do not ramify in K , then the denominator of each of the Igusa 
class polynomials of K divides 

D = n p=i+'=2Li°g(A)/iogpj Y' ^ 

p prime 

where ci, C2 > are integral constants, and h' G {hi, 2/ii} is the degree of 
the Igusa class polynomials of K. 

Furthermore, we have logD = 0{h'A) = 0{AI^^AI^^) as A tends to 
infinity. 

The small constants ci and C2 will be explicit in a future publication of 
Eyal Goren. The theorem as stated holds for the absolute Igusa invariants 
11,12,13 of Section [21 For another choice of a set of Igusa invariants 5", 
one needs to multiply D by , where cs is the smallest positive integer 
such that C3S is contained in Z[l2, h, h, Iio]- 

We will now prove Theorem 19.21 We write the field K as K = 
Q(\/— a + 6\/Ao), where a and 6 are positive integers. Primes that may 
occur in the denominators of the coefficients of class polynomials can be 
bounded in terms of a and Ao. 



< d 



log log A 
log A 



37 



Lemma 9.3 (Goren and Lauter [15]). The coefficients of eacfi of tfie 
polynomials HK,n{X) for K = Q(\/— a + by^Ao) are S'-integers, where S 
is the set of primes smaller than 4Aoa^. 

Proof. Corollary 5.2.1 of |15| is this result with Aq replaced by Aq. We 
can however adapt the proofs to remove a factor Aq. In [151 Corollary 
2.1.2], it suffices to have only N{k\)N{k2) < p/4 in order for two elements 
fei and k2 of the quaternion order to commute. Then, in the proof of [151 
Theorem 3.0.4], it suffices to take as hypothesis only p > d(Tr(r))^. As we 
have ci(Tr(r))^ > d5i52 > N{x)N{by'^), this implies that x and by^ are 
in the same imaginary quadratic field Ki. As in the original proof, this 
implies that ywy"^ is also contained in Ki and hence il){^/r) G A'hiKi), 
so K ^Qi^)^ M2{Ki). □ 

Remark 9.4. Lemma 19.31 as phrased above is for class polynomials de- 
fined in terms of invariants in TZ = ZfJj, -^^4, ^g, ^lo^]. If an invariant 
j G m~^TZ is used with m G Z, then the result is still valid if the primes 
dividing m are added to S. 

As Lemma 19.31 holds for any representation of K of the form K = 
Ko{y/ —a + 6-y/So), we may choose a,b such that a is minimal. The fol- 
lowing result shows how good a can be. 

Lemma 9.5. Let iC" be a quartic CM field with discriminant A and let 
Ao be the discriminant of the real quadratic subfield Kq. 

For all a, 6 G Z such that K = Q(-\/— a -I- &%/Ao), we have Ai < a? . 
Conversely, there exist such a, 6 G Z with a? < (;|)^AiAo. 

Proof. The first bound is trivial, because Ai divides a? — &^Ao < . 
For the bound in the other direction, we show the existence of a suitable 
element —a + b^fKo using a geometry of numbers argument. 

We identify K (8)q R with via its pair of infinite primes. Then Ok 
is a lattice in of covolume 2~^\/A. Let uji,lj2 be a Z-basis of Okq, and 
consider the open parallelogram 1, 1) + (x;2(— 1, 1) C Okq ® R = R^. 
We define the open convex symmetric region 

W = {a: G Re(x) G a;i(-l, 1) + UJ2(-1, 1), (Imxi)' + (Imara)^ < Y}. 

Then vol(W) = ^n\/'KoY and by Minkowski's convex body theorem, Vy 
contains a non-zero element a G Ok if vol(W) > 2^* covol Ok = 4\/A. 
We pick Y = \/AiAo^7r~^ + e, so that 01 exists. 

Let r = 4(ci— a)'^, which is of the form — a-f 6\/Ao with integers a and b. 
Nowa = i jri + r2| = 2(2Imxi)^-h2(2Im3;2)^ < 8F = S^Ai Aovr"^ + 8e. 
As a is in the discrete set Z, and we can take e arbitrarily close to 0, 
we find that there is an o G Z with a < SVAiAott""^ and hence < 
(f)'AiAo. □ 

Recent, not yet published, results by Eyal Goren bound the exponents 
to which primes may occur in the denominator. The reflex field K'' of K 
(see Shimura [33) is K itself if K is cyclic Galois. If K is quartic non- 
Galois, then K'' is the unique (up to conjugacy) quartic CM subfield of 
the normal closure of K that is not conjugate to K itself. In particular, it 
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has the same normal closure as K. Let be the Hilbert class field of . 
By the main theorem of complex multiplication |30l Main Theorem 1 in 
Section 15.3], each of the Igusa class polynomials splits into linear factors 
over . 

Lemma 9.6 f |13lll4) '). There exist explicit positive real constants C\,C2 
such that the following holds. Let K he a. primitive quartic CM field. Let 
j G be a zero of one of the Igusa class polynomials of A', p a prime 
of lying over a rational prime p and e(p/p) its ramification index. If 
e(p/p) < p, then -ordp(j) < ci + o,'-^^^^. □ 

Proof of Theorem Iff.gl Lemmas 19.31 and 19.51 prove that the denominator 
of the Igusa class polynomials is divisible only by primes dividing D. 

As is unramified over , we have e(p/p) < 4, so the condition 
e(p/p) < p is satisfied automatically for p> 5, is equivalent to e < 2 for 
p = 3, and equivalent to e = 1 for p = 2. 

Now let / G Q[a;] be a monic irreducible factor of an Igusa class poly- 
nomial of K. Let p be any prime number and assume that 2 and 3 are 
unramified in K. Then the prime p occurs in denominators of coefficients 
of / to a power at most deg(/) • (ci +C2 '"^p^""'' ). Indeed, let j be any root 
of / in and let L = Q(j). Let p = f| pi be the decomposition of p in L. 
Write B = ci + C2log(Aoa)/logp. By Lemma 19.61 we have v^^i^j) > — B 
for every i. Therefore, p^j is pi-integral and hence so is p^'^^sC/) j 

This concludes the proof that DHk.ti is in Z[X] for n= 1, 2,3. Next, 
we bound D. Note that the exponent of every prime in D^^'^ is linear in 
log A, as is the bit size of every prime divisor of D. Therefore, log D is 
O(h'N), where A'^ = 0(A) is the number of prime divisors of D, which 
finishes the proof of Theorem 19.21 □ 

Remark 9.7. In order to have results that hold regardless of the de- 
composition of 2 and 3, one should generalize Lemma 19.61 to the case 
e(p/p) ^ Pi a-t least for p = 2, 3. 

There is also the possibility of reducing the number of "bad" decom- 
position types by generalizing results of Goren |12| . For example, [101 
Theorem 3.5] shows that if p decomposes as pip2p3 in K, then the re- 
duction of a CM abelian surface modulo any prime over p has p-rank 1 
and hence is not the product of two supersingular elliptic curves with the 
product polarization. This shows that in that case, p will not occur in the 
denominator. 

Improvements 

In this section, we give an improvement of the bounds in Theorem 19.21 
which is proven only for a relatively small subset of the set of CM fields. 

Let Kq be the real quadratic subfield of the reflex field of K. Then 
we have Kq = Q(x/Ai). 

Theorem 9.8 (Yang). Let K be a primitive quartic CM field such that 
Ao and Ai are prime and Ok is monogenic over Okq, i-e. of the form 
Ok ~ Okq [ct] for some a £ K . 
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For any fractional Oko -ideal a, let 

p{a) = #{a C Ok. i NKr/Ki,^ = a}. 

Let C be the relative discriminant of K'^ /Kq, and for any it G f), 

let 

Cu= Yl a^Cp)*""*"*"" G z. 

p prime 

Let S be the set of pairs (n, k) G such that n is positive, odd, and 
less than \/ Ao, that k satisfies 4 |fe| < (Ao — n )^/Ai, and that u{k, n) = 
(4fc + (Ao - n2)v/A7)/8 G Ko is an element ofd. 

Then the denominator of each Igusa class polynomial of K divides 

D' = 32'' Cu{fc,n)- 
(n,fc)SS 

We have \ogD' = 0((Ao Ai)^/^+") as A tends to mfimty. 

For comparison, recall that we have logD = 0{Al''^ Ay^) in Theo- 
rem lOl 



Proof. Note first that D' is indeed finite, because p(up~^) is zero unless p 
divides u. This observation, together with the fact that we have p{up~^) < 
d{N{u)), also implies that Cu divides 



For K = Q(C5), the curve C : y'-^ = + 1 over C has CM by Ok- 
Since we have h' — hi — 1, this is the only such curve up to isomorphism. 
We compute in(C) — and hence HK,n = X £ Z[X] for n = 1, 2, 3, which 
proves the result for K = Q(C5)- 

As Ok is monogenic over Okq, the relative discriminant of K/Ko is a 
square modulo 4, hence the same holds for its norm Ai. As Ai is prime, 
this implies that it is 1 modulo 4, and hence all conditions of Theorem 9.1 
of [3^ are satisfied. If furthermore, K is not isomorphic to Q(C5)j then 
its number of roots of unity Wk is equal to 2. 

Theorem 9.1 of [38] states the analogue of what we need to prove for 
Spallek's absolute invariants, but only for the constant coefficient of the 
Igusa class polynomials. The result can be generalized to all coefficients 
and to more general absolute invariants. For our absolute Igusa invariants, 
we can replace the factors 3Wk and 2Wk in that result by Wk, which 
is 2 for all primitive quartic CM fields that are not isomorphic to Q(C5)- 
This proves that D'HK,n is in Z[X] for n = 1, 2, 3. 

Finally, for (n, k) G S, there are at most [\/Ao — IJ possible values 
for n. As k is an integer in an interval of length less than Ao\/A7/2 that 
is (Ao — n^)\/Ai/4 modulo the ideal 2d of norm 4Ao, there are at most 
\\/ Ai/S] possibilities for k. This proves that S has less than \/AoAi 
elements. 

For the final bound, note that D' has less than V ^oAi factors Cu, 
each of which has a logarithm that is at most 

'^d{NKr/Q{u))logNKyQiu), 
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where d(m) — 0{m'^), and Nk'^/q^u) is bounded by a polynomial in 
AqAi. Together with the bound on h\ of Lemma l9.ll and the fact that 
h' < 2hi , this proves the final bound. □ 

As with Theorem l9.2l the result is stated only for our choice of absolute 
invariants. For other invariants, one needs to adapt the constant 32 and 
the exponent 2 of Cu appropriately. For example, with Spallek's absolute 
invariants, the exponent 2 needs to be 6. 

If the Bruinier and Yang's Conjecture 1.1 of [38] is true, then the 
conditions that Ai is prime and that Ok is monogenic over Okq are not 
needed in Theorem 19.81 

A conjecture of Lauter 21] also bounds the primes dividing the de- 
nominators of Igusa class polynomials by stating that each such prime 
divides A — for some non-negative integer x < A^^^ . However, the 
field K = Q[X]/{X'^ + 558X^ + 31873) with Ao = 17 and Ai = 31873 
is a counterexample, as demonstrated by the corresponding entry in the 
ECHIDNA database [19]. The prime 7499 divides the denominator of the 
class polynomials, but it does not divide A — for any small enough x. 
The conjecture did not go down without a fight: our search of the database 
revelled only 17 counterexamples among thousands of CM fields, and we 
found no counterexamples with class number h < 14. 

10 Recovering a polynomial from its roots 

In this section, we show how to compute a polynomial from complex 
approximations of its roots. This will tell us the precision to which we need 
to know these roots. The rest of the paper will be about approximating 
these roots for the case of Igusa class polynomials. The algorithms in 
this section are well known to the experts, but we did not find an error 
analysis in the literature. 

We will compute an approximation of a polynomial from approxima- 
tions of its roots in Sections 110.11 and 110.21 Then in Section 110.31 we 
compute numerators and denominators of the coefficients from their ap- 
proximations. 

10.1 Polynomial multiplication 

For a complex polynomial g, let \g\-^ (resp. \g\^) be the sum (resp. max- 
imum) of the absolute values of the coefficients of g. We find |(7ig2|oo — 
ISiL I52I1 and \g\-, < (deg(g) + 1) \g\^. 

The following algorithm computes products of integer polynomials. 

Algorithm 10.1. Input: Polynomials (?i,g2 £ given by the binary 

expansions of their coefficients. 
Output: The product gig2 G Z[X]. 

1. Let k = riog2 Igil^l + \log., IgaLl + riog2(deg(gi) + 1)]. 

2. Evaluate the polynomials at 2*° by writing the binary expansions of 
their coefficients after each other with the appropriate number of 
zeroes between them. 
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3. Multiply the results of step 2 using fast integer multiplication. 

4. Read off the binary expansions of the coefficients of gig2 from the 
result of step 3. 

This algorithm has a run time of M{{deg(gig2) + l)\og2\gig2\^), 
where M{n) = 0(n log n log log n) is the time needed for a multiplica- 
tion of n-bit integers. 

For a complex polynomial g £ C[X] and a positive integer p, an ap- 
proximation g of g with absolute precision p is an object of the form 
2^^{a + ib), where a and b are polynomials in 7i[x] given by the binary 
expansions of their coefficients. Complex numbers are complex polyno- 
mials of degree and have approximations as such, which is exactly the 
notion of approximation from Section [8.31 The error of an approximation 
g- of a polynomial g is e{g) = \g — g\^- Suppose we have approximations 
cjk ~ 2^'^{ak + ibk) of gk for fc = 1,2 with absolute precision p. The 
following algorithm computes an approximation 17132 of the product g\g2 
with the same absolute precision. It does this by computing the product 
]jig2 exactly, and then reducing the precision back to p. 
Algorithm 10.2. Input: Approximations = 2~^{a\ ~\- ibi) and 32 ~ 
2~^{a2 + 162) of complex polynomials gi,g2- 
Output: An approximation gig2 = 2~*'(a -f- ib) of (71(72. 

1. Compute a' — aia2 — 61&2 and b' = 01^2 + 6102 in Z[Jf] using 
Algorithm [run 

2. Let a G Z[X] be obtained from a'/2^ G Q[-'^^] by rounding each 
coefficient to the nearest integer. Let b G Z[A'] be obtained from 
6'/2^ in the same way. 

Lemma 10.3. Algorithm 110.21 takes time 

M((deg(<7i52) + l)(log2 l3i(72L + 2"))- 

The error £(5152) is at most 

ISili <92) + |.g2|i + (deg(.gi) + l)e(5i)e(ff2) + 2"". 

Proof, The runtime follows from the fact that we simply apply Algorithm 
llO.ll four times. The triangle inequality for |-|^ gives us the bound on the 
error. □ 

10.2 Reconstructing a polynomial from its roots 

Let zi,...,Zn be complex numbers. The purpose of this section is to 
compute an approximation of / = nr=i(^ ~ •^O ^ ^[^] from an approxi- 
mation oi zi, . . . , Zn. Suppose that we know Si G Q such that + 1 < Si 
for i = 1, . . . , n, and let s = f| Si. 

Algorithm 10.4. Input: an integer u> Q and approximations 2:1 , ... , Zn 
of zi, . . . , z„ with error 

e(ii) < 2~"~^J;^* sj-siogjn-a 
Output: an approximation / of / = ^"^^(X — Zi) G C[X] with error 

<f) < 2-". 
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1. Build a binary tree of depth / = [1082 '^1 with at n of the leaves the 
n linear polynomials X — Zi, and at the remaining 2' — n leaves the 
constant polynomial 1. 

2. From the leaves up to the root, at every node t of the tree, put the 
product gt of the two nodes below it, computed by Algorithm 110.21 
with absolute precision p = u + X]j>£i log2 Sj + 3 logj n + 3. 

3. Output the root of the tree. 

Theorem 10.5. A Igorithm \lU.4\ is correct and has a runtime of 

0{nm\og{nm)^ loglog(nm)), 
where m = max{ii, log n, log s} . 

Proof of Theorem \10.5[ For every node t of the tree, denote by d{t) the 
set of leaves i below t. For every node t of the tree, let gt be the polynomial 

gt^ n - 

ied(t) 

of which the polynomial gt computed in the algorithm is an approxima- 
tion. Let bk be the maximum over all nodes t at distance at most k to 
the leaves of 

\9t\1 n "^^^ 

i£d(t) 

Similarly, let Hk be the maximum over all nodes t at distance at most k 
to the leaves of 

ied{t) 

Then 6fc < 1 for all k. Therefore, by Lemma [10.31 we have 

Kk+i < 2Kk + (2'= + 1)kI + 2-" < 3Kk + (2'= + 1)kI. 

If kq < n~^, then by induction this implies that Kk < 4*^0 for all k, so 
Ki < (2n)^Ko. In particular, the error of each coefficient of the output is 
at most {2n)^Kos. 

This means that kq = 2""-^'°s"-3-iog2 s gufg^ient. At the fc-th level 
of the tree, there will be 2'"* polynomial multiplications of degree at most 
2*° where each coefficient has a bit size of 0(m), so each of the I < l+logj n 
levels takes time 0(Af (nm)), which proves the complexity. □ 

10.3 Recognizing rational coefficients 

There are various ways of recognizing a polynomial / G Q[^] from an 
approximation /. If one knows an integer D such that the denominator of 
/ divides D, and the error e(/) is less than {2D)~^ , then Df is obtained 
from Df by rounding the coefficients to the nearest integers. 

Other methods to compute / from / are based on continued frac- 
tions, where the coefficients of / are obtained via the continued fraction 
expansion of the coefficients of /, or on the LLL-algorithm, where the 
coefficients of an integral multiple of / arise as coordinates of a small 
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vector in a lattice |241 Section 7]. Such methods have the advantage that 
only a bound B on the denominator needs to be known, instead of an ac- 
tual multiple D. This is very useful in practical implementations, because 
one can guess a small value for B, which may be much smaller than any 
proven D. In the case of Igusa class polynomials, there exist a few good 
heuristic checks of the output when using a non-proven bound D, such as 
smoothness of the denominators, and successfulness of the CM method. 

For our purposes of giving a proven runtime bound, however, we prefer 
the first method of rounding Df, since it is easy to analyze and asymp- 
totically very fast. The following algorithm computes D for the case of 
Igusa class polynomials. 

Algorithm 10.6. Input: The discriminant A of a primitive quartic CM 
field K and the degree h' of the Igusa class polynomials of K. 
Output; The integer D of Theorem 19.21 which satisfies DHK,n G 
for n = 1,2, 3. 

1. List all positive integers up to 2**7r~^A. 

2. Use the sieve of Eratosthenes to eliminate all non-primes. 

3. Raise each prime remaining in the list to the power 

(ci -|-C2LlogA/logpJ)/i', 

where ci , C2 are as in Theorem 19.21 

4. Compute the product of the integers of step [3] using a binary tree, 
just as we used a binary tree to compute a product of polynomials 
in Algorithm \TOA\ 

Algorithm 110.61 takes time O(logZ)), so we conclude that we can com- 
pute HK,n from an approximation HK,n in time 0(log D) plus time linear 
in the bit size of HK,n, provided that we have t{HK,n) < {2D)~^. 



Algorithm 11.1. Input: A positive quadratic fundamental discriminant Aq 
and positive integers a and b such that the the field 



is a primitive quartic CM field of discriminant greater than a. 
Output: The Igusa class polynomials Hk.u for n = 1, 2, 3. 

1. Compute a Z-basis of Ok using the algorithm of Buchmann and 
Lenstra [3] and use this to compute the discriminant A of K. 

2. Compute a complete set {^i, . . . of representatives of the h' 
isomorphism classes of principally polarized abelian surfaces over C 
with CM by Ok, using Algorithm 14.21 Here each Aj is given by a 
triple ($j,Oj,^j) as in Section |3] 

3. From A and h' , compute a number D such that DHK,n is in Z[A] 
for n = 1, 2,3, using Algorithm 110.61 



11 The algorithm 
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4. For j — 1, . . . , h' , do the following. 

(a) Compute a symplectic basis of aj using Algorithm 15.11 This 
provides us with a period matrix Wj £ TL2 n Mat2(I/), where 
L C C is the normal closure of K. 

(b) Replace the period matrix Wj by an Sp4(Z)-equivalent period 
matrix Zj £^^2 Mat2(I/), using Algorithm 16.31 

(c) Let Uj = [3 + ■K{yi + 1/2 - ys) + max{2, - log2 \z3\}] , where 




and yk=lmzk (fc = l,2, 3). 



5. Letp= [log2-D+31og2ft'+4]+X;^li(2Mi+40). This is the precision 
with which we will approximate the Igusa invariants. 

6. For j = 1, . . . , ft', do the following. 

(a) Evaluate the theta constants in Zj, using Algorithm 18.131 to a 
precision rj — 101 + 7uj + p. 

(b) Use Algorithm 18.111 to evaluate in{Aj) for (n = 1,2,3) to pre- 
cision p. 

7. For n = 1, 2, 3, do the following. 

(a) Use Algorithm ll0.4l to compute an approximation HK,n of HK,n 
for n — 1,2,3 from the approximations of Igusa invariants of 
step[6bl 

(b) Compute DHK,n by rounding the coefficients of DHk.u to near- 
est integers. 

(c) Output HK,n- 

If Cardona-Quer invariants as in Section [2. II are used in the definition of 
Igusa class polynomials, then we should do the following. 

1. Perform the above algorithm with not only the (non-Cardona-Quer) 
absolute invariants 11,12,23, but also 14 = /|/]^/. Call the output 

Pl,P2,P3,P4. 

2. If Pi(0) 7^ 0, which is 'usually' true, then output Pi, P2, P3 and stop. 

3. Otherwise, perform the above algorithm with the Cardona-Quer in- 
variants. At Step I6bl decide whether I^iZj) is zero by deciding if 
i-iiZj) of Pi is zero. This can be done using the height of Pi, the 
absolute value bounds on iz{Z}^ with k ^ j, and a suitable approx- 
imation of i3{Zj). In the same way, if I^{Zj) is zero, then we need 
to decide if l2{Zj) is zero, which can be done using P4. 

To compute the polynomials HK,n {n = 2, 3) of Section ETII modify step |7al 
as follows: 

1. Evaluate each summand in the definition of the polynomial HK,n 
using Algorithm 110.41 

2. Evaluate HK,n using a binary tree as in Algorithm ll0.4l with addition 
instead of multiplication. 

We now recall and prove the main theorem. 
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Main Theorem. Algorithm computes HK,n (n = l,2,3j for any 

primitive quartic CM field K m which 2 and 3 do not ramify. It has a 
runtime of 0{^^^'^ A\^^'^) and the hit size of the output is 0{A\Aq). 

Proof, We start by proving that the output is correct. By Proposition 
18.121 the precision rj for the theta constants suffices to get the absolute 
Igusa invariants with precision p. Corollary 18.91 tells us that we have 
\in{Zj)\ < 2^"3+''^. These bounds and Theorem 110.51 show that it suffices 
to know the absolute Igusa invariants to precision p in order to get a 
precision of 1 + logj D bits for the coefficients of HK,n- By Theorem 
19.21 the polynomials DHk.u have integer coefficients, so a precision of 1 + 
logj D for the coefficients of Hk.u suffices for recognizing these coefficients 
and getting a correct output. This proves that the output of Algorithm 
111. H is correct. 

Next, we bound the precisions p and rj. We start by bounding Uj, for 
which we need an upper bound on j/i + 3/2 — 3/3 and a lower bound on 23. 
We have 2/2 > yi and j/3 > 0, and Corollary 17.21 gives the upper bound 
J/2 < |aJ Aq^^, which bounds yi + y2 — ys from above. 

We claim that the off-diagonal entry 2:3 of Zj £ 7^2 is non-zero. Indeed, 
if 23 = 0, then Zj = diag(2i,22) with 21,22 £ Ti. — Tii and Aj is the 
product of the elliptic curves corresponding to 21 and 22, contradicting 
the fact that Aj is simple (Theorem I4.1|l . The claim and Corollary 16.111 
together now give an upper bound on log(l/23), which is polynomial in 
log A by Lemma 14.91 

We now have Uj = d{Al^^Al^^), h' = d{Al^^Al^^), and by Theorem 
112] also logD = 0(Af/^Af;''2), so that we get p = 0(Al^'^A^^^) and also 
rj = 0(A?/2aS/2). 

Finally, we can bound the runtime. Under the assumption that K 
is given as K = Q(\/— a -I- b-ySo), where Ao is a positive fundamental 
discriminant and a, b are positive integers such that a < Ao, we can factor 
(a^ — Ao)Ao and hence find the ring of integers in step[T]in time 0(A). 

As shown in Section r4.3l step[2]takes time 0{A^^^). Step[3]takes time 
0(D) = 0(A?/2a5/2). 

For every j, step I4al takes time polynomial in log A by Lemma [4.9l and 
Theorem 16.101 The same holds for steps I4bl and |4c] and each summand 
of step [S] The number of iterations or summands of these steps is 2h' = 
0(Ai^^Ao''^) by Lemmas mi] and gUl In particular, steps g] and [S] take 
time 0(A;/2aJ/2). 

We now come to the most costly step. By Theorem l8.14l it takes time 
0(rj) to do a single iteration of step JSa] In particular, all iterations of 
this step together take time 0(Al/^Ao^/^). 

The j-th iteration of step I6bl takes time 0(r) and hence all iterations 
of this step together take time 0(Af Ag). Finally, by Theorem 110.51 step 
I7al takes time 0(h') times 0{p), which is O(AiAo). The same amount of 
time is needed for the final two steps. 

The output consists oi h' + 1 rational coefficients, each of which has a 
bit size of 0(Ai/^Ao''^), hence the size of the output is 0(A?Ao). 

This proves the main theorem, except when using the polynomials 
HK,n (n = 2,3) of Section l2.ll However, it takes only 0{hi) times as 
much time to evaluate HK,n from the Igusa invariants as it does to evaluate 
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Hk.u- This is still dominated by the runtime of the rest of the algorithm. 

□ 

It also follows that using Dupont's [6] alternative method of evaluating 
theta constants as in Section [8.51 the heuristic runtime of Algorithm 1 11. II 
is O(AiAo)) = O(A^), which can still be improved if better bounds on 
the denominators are found. 

Theorem 11.2. If we restrict in Alaorithm \ll.l\ to fields K such that Ao 
and Ai are prime and Ok is monogenic over Okq , o,nd replace D in step 
3 by D' from Theorem \9.8[ then the output of Algorithm \11.1\ remains 
correct, the runtime becomes 0(Af/^Ao/^) + 0(Af/^Ao^^), and the bit 
size of the output becomes O(AiAo) + 0(A?''^Ag''^). 

Proof. Theorem 19.81 proves that D' suffices. The bourids in that theorem 
show that the precision p satisfies p = 0(Ai''^ Ag'^'^) + 0(Ai Aq) and hence 
the runtime and output are as claimed. 

Note that the time for computing D' (or possibly a multiple of D' that 
is easier to compute and asymptotically not much worse) is dominated by 
this runtime. □ 
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